Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,078 total in npm · sorted newest first- May 22, 2026
Malicious code in @cloudways-lab/unified-design-system (npm)
1 compromised version
- May 22, 2026
Malicious code in @citi-icg-171632/citicms-repo-component (npm)
1 compromised version
- May 22, 2026
Malicious code in share-anything-cli (npm)
1 compromised version
- May 22, 2026
Malicious code in cdk-sagemaker-notebook-workflow (npm)
6 compromised versions
- May 22, 2026
Malicious code in @tmecontinue/claude (npm)
1 compromised version
- May 22, 2026
Malicious code in codebuff-cli (npm)
26 compromised versions
- May 22, 2026
Malicious code in finkrouter (npm)
3 compromised versions
- May 22, 2026
Malicious code in logger-draft (npm)
3 compromised versions
- May 22, 2026
Malicious code in @thebros/create-benjamin (npm)
1 compromised version
- May 22, 2026
Malicious code in reactive-cdk-app (npm)
4 compromised versions
- May 22, 2026
Malicious code in @inetafrica/open-claudia (npm)
2 compromised versions
- May 22, 2026
Malicious code in @pisell/pisellos (npm)
6 compromised versions
- May 22, 2026
Malicious code in kurumi-fca (npm)
2 compromised versions
- May 22, 2026
Malicious code in @euqns/nudge-mcp (npm)
4 compromised versions
- May 22, 2026
Malicious code in get-package-lint (npm)
1 compromised version
- May 22, 2026
Malicious code in skipshot-agent (npm)
1 compromised version
- May 22, 2026
Malicious code in lynx-keeper-cli (npm)
2 compromised versions
- May 22, 2026
Malicious code in xy-ai-chat (npm)
2 compromised versions
- May 22, 2026
Malicious code in @43uh3ig43/telemetry-client (npm)
1 compromised version
- May 22, 2026
Malicious code in qaq-core-util-v2 (npm)
1 compromised version
- May 22, 2026
Malicious code in bingocode (npm)
2 compromised versions
- May 22, 2026
Malicious code in @onerjs/procedural-textures (npm)
1 compromised version
- May 22, 2026
Malicious code in @druids/ui (npm)
1 compromised version
- May 22, 2026
Malicious code in harmony-enablers-test-2026 (npm)
1 compromised version
- May 22, 2026
Malicious code in wrld-dev (npm)
1 compromised version
- May 22, 2026
Malicious code in @asura21232/fca-unofficial-nextgen (npm)
1 compromised version
- May 22, 2026
Malicious code in acc-document-editing (npm)
6 compromised versions
- May 22, 2026
Malicious code in @shwfed/nuxt (npm)
3 compromised versions
- May 22, 2026
Malicious code in pypi-build-verifier (npm)
- May 22, 2026
Malware in dependency-audit-tool
1 compromised version
- May 22, 2026
Malware in deploy-guard-check
1 compromised version
- May 22, 2026
Malware in chain-key-validator
1 compromised version
- May 22, 2026
Malware in web3-secrets-detector
1 compromised version
- May 22, 2026
Malware in deployment-key-auditor
1 compromised version
- May 22, 2026
Malware in wallet-backup-verifier
1 compromised version
- May 22, 2026
Malware in credential-verification-cli
1 compromised version
- May 22, 2026
Malware in compliance-check-runner
1 compromised version
- May 22, 2026
Malware in python-env-auditor
1 compromised version
- May 22, 2026
Malware in pypi-build-verifier
1 compromised version
- May 22, 2026
Malware in build-integrity-verify
1 compromised version
- May 22, 2026
Malicious code in env-security-scanner (npm)
- May 22, 2026
Malware in foundry-deploy-helper
1 compromised version
- May 22, 2026
Malware in hardhat-gas-profiler-plugin
1 compromised version
- May 22, 2026
Malware in ethers-multicall-utils
1 compromised version
- May 22, 2026
Malware in truffle-config-helper
1 compromised version
- May 22, 2026
Malware in defi-threat-scanner
1 compromised version
- May 22, 2026
Malware in solana-pda-helper
1 compromised version
- May 22, 2026
Malware in ganache-cli-provider
1 compromised version
- May 22, 2026
Malware in crypto-credential-scanner
1 compromised version
- May 22, 2026
Malware in mnemonic-safety-check
1 compromised version
Page 84 of 4,802