Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,073 total in npm · sorted newest first- May 28, 2026
Malicious code in @cloudplatform-single-spa/agreements (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/advanced (npm)
- May 28, 2026
Malicious code in @cloudplatform-single-spa/administration (npm)
- May 28, 2026
Malicious code in @car-loans/wait-task-props (npm)
- May 28, 2026
Malicious code in @car-loans/show-car-year-module (npm)
- May 28, 2026
Malicious code in @car-loans/save (npm)
- May 28, 2026
Malicious code in @car-loans/safe-storage-module (npm)
- May 28, 2026
Malicious code in @car-loans/restore (npm)
- May 28, 2026
Malicious code in @car-loans/referrer-module (npm)
- May 28, 2026
Malicious code in @car-loans/online-sign-aff (npm)
- May 28, 2026
Malicious code in @car-loans/online-scoring-aff (npm)
- May 28, 2026
Malicious code in @car-loans/mobile-car-loans-application (npm)
- May 28, 2026
Malicious code in @car-loans/gus (npm)
- May 28, 2026
Malicious code in @car-loans/general-feature-toggles (npm)
- May 28, 2026
Malicious code in @car-loans/general-analytics (npm)
- May 28, 2026
Malicious code in @car-loans/feature-toggles-module (npm)
- May 28, 2026
Malicious code in @car-loans/desktop-car-loans-application (npm)
- May 28, 2026
Malicious code in @car-loans/deal-aff (npm)
- May 28, 2026
Malicious code in @car-loans/deal (npm)
- May 28, 2026
Malicious code in @car-loans/close-flow-module (npm)
- May 28, 2026
Malicious code in @car-loans/application-aff (npm)
- May 28, 2026
Malicious code in @car-loans/applicaion-aff (npm)
- May 27, 2026
Malicious code in @polka-ui/config (npm)
1 compromised version
- May 27, 2026
Malware in shop-minis
1 compromised version
- May 27, 2026
Malware in testing-on-npmjs
1 compromised version
- May 27, 2026
Malware in skills-detector
1 compromised version
- May 27, 2026
Malware in verify-mycommand
1 compromised version
- May 27, 2026
Malware in claude-channel-imessage
1 compromised version
- May 27, 2026
Malicious code in bulletproof-json (npm)
- May 27, 2026
Malware in bulletproof-json
1 compromised version
- May 27, 2026
Malware in @not-nemo/crypto-tracker
1 compromised version
- May 27, 2026
Malware in chai-as-repaired
1 compromised version
- May 27, 2026
Malicious code in editorial-code (npm)
1 compromised version
- May 27, 2026
Malicious code in mse-authentication (npm)
1 compromised version
- May 27, 2026
Malicious code in editorial-mse-authentication-ui (npm)
1 compromised version
- May 26, 2026
Malicious code in unleash-js (npm)
1 compromised version
- May 26, 2026
Malicious code in wm-mapper (npm)
1 compromised version
- May 26, 2026
Malicious code in loadtest-browser-lib (npm)
1 compromised version
- May 26, 2026
Malicious code in @slipless/sdk (npm)
1 compromised version
- May 26, 2026
Malicious code in chainix (npm)
1 compromised version
- May 26, 2026
Malicious code in token-me-uk (npm)
1 compromised version
- May 26, 2026
Malicious code in amaco-os (npm)
2 compromised versions
- May 26, 2026
Malicious code in saturn-bail (npm)
1 compromised version
- May 26, 2026
Malicious code in metricflow-tracker (npm)
1 compromised version
- May 26, 2026
Malicious code in web3.prc (npm)
- May 26, 2026
Malicious code in web3-prices (npm)
- May 26, 2026
Malicious code in int-node (npm)
- May 26, 2026
Malware in int-node
1 compromised version
- May 26, 2026
Malware in web3.prc
1 compromised version
- May 26, 2026
Malware in web3-prices
1 compromised version
Page 76 of 4,802