Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,078 total in npm · sorted newest first- May 22, 2026
Malware in chainlink-price-feed-aggregator
1 compromised version
- May 22, 2026
Malware in eth-wallet-sentinel
1 compromised version
- May 22, 2026
Malware in foundy-toolkit
1 compromised version
- May 22, 2026
Malware in env-security-scanner
1 compromised version
- May 22, 2026
Malware in defi-env-auditor
1 compromised version
- May 22, 2026
Malware in solidity-deploy-guard
1 compromised version
- May 22, 2026
Malware in etherjs-utils
1 compromised version
- May 22, 2026
Malware in solna-web3
1 compromised version
- May 22, 2026
Malware in wallet-security-checker
1 compromised version
- May 22, 2026
Malicious code in mev-shield (npm)
1 compromised version
- May 22, 2026
Malicious code in deploy-guard-check (npm)
1 compromised version
- May 22, 2026
Malicious code in build-integrity-verify (npm)
1 compromised version
- May 22, 2026
Malicious code in dependency-audit-tool (npm)
1 compromised version
- May 22, 2026
Malicious code in python-env-auditor (npm)
1 compromised version
- May 22, 2026
Malicious code in credential-verification-cli (npm)
1 compromised version
- May 22, 2026
Malicious code in compliance-check-runner (npm)
1 compromised version
- May 22, 2026
Malicious code in internallib_v493 (npm)
3 compromised versions
- May 22, 2026
Malicious code in audit-logsss (npm)
1 compromised version
- May 22, 2026
Malicious code in @exocore/exocode (npm)
3 compromised versions
- May 22, 2026
Malicious code in allbridge-example-react (npm)
1 compromised version
- May 22, 2026
Malicious code in ignite-market-contracts (npm)
1 compromised version
- May 22, 2026
Malicious code in ignite-market-contractstest (npm)
2 compromised versions
- May 21, 2026
Malicious code in crypt0co-walet-poc (npm)
1 compromised version
- May 21, 2026
Malicious code in claude-content-writer (npm)
1 compromised version
- May 21, 2026
Malicious code in @rui.branco/sentry-mcp (npm)
1 compromised version
- May 21, 2026
Malicious code in search-connector-template (npm)
1 compromised version
- May 21, 2026
Malicious code in configcat-trello-powerup (npm)
1 compromised version
- May 21, 2026
Malicious code in @remitee-money-transfer/rmt-base (npm)
4 compromised versions
- May 21, 2026
Malicious code in cryptoco-auth (npm)
9 compromised versions
- May 21, 2026
Malicious code in cloudsmith-vsc (npm)
1 compromised version
- May 21, 2026
Malicious code in @ornexus/neocortex (npm)
2 compromised versions
- May 21, 2026
Malicious code in fnd-stores (npm)
2 compromised versions
- May 21, 2026
Malicious code in pubnub-moderation-tool (npm)
1 compromised version
- May 21, 2026
Malicious code in moneykit-cardano-demo (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-vite (npm)
1 compromised version
- May 21, 2026
Malicious code in @jaggle/resizeobserves (npm)
20 compromised versions
- May 21, 2026
Malicious code in @kyungseopk1m/holidays-kr (npm)
1 compromised version
- May 21, 2026
Malicious code in maxixy-cli (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-tuned (npm)
1 compromised version
- May 21, 2026
Malicious code in @pulse-web-platform-core/scripts-loader (npm)
1 compromised version
- May 21, 2026
Malicious code in veteran (npm)
3 compromised versions
- May 21, 2026
Malicious code in tailwindcss-themers (npm)
- May 21, 2026
Malicious code in tailwindcss-theme-custom (npm)
- May 21, 2026
Malware in tailwindcss-theme-custom
1 compromised version
- May 21, 2026
Malware in tailwindcss-themers
1 compromised version
- May 21, 2026
Malicious code in celonix-otp-react (npm)
5 compromised versions
- May 21, 2026
Malicious code in json-spectaculation (npm)
1 compromised version
- May 21, 2026
Malware in json-spectaculation
1 compromised version
- May 21, 2026
Malicious code in veteran-proxy (npm)
1 compromised version
- May 21, 2026
Malicious code in utils-mf (npm)
10 compromised versions
Page 85 of 4,802