Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,078 total in npm · sorted newest first- May 21, 2026
Malicious code in @dekuzxc/nexca (npm)
3 compromised versions
- May 21, 2026
Malicious code in @vino.tian/vibe-kanban (npm)
3 compromised versions
- May 21, 2026
Malicious code in @lokuma/cli (npm)
1 compromised version
- May 21, 2026
Malicious code in ihubinternal (npm)
1 compromised version
- May 21, 2026
Malicious code in @luke-101141/nobody (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-afforded (npm)
- May 21, 2026
Malware in chai-as-afforded
1 compromised version
- May 21, 2026
Malicious code in n8n-nodes-whatsapp-business-api-by-automations-builder (npm)
1 compromised version
- May 21, 2026
Malicious code in zest-product (npm)
2 compromised versions
- May 21, 2026
Malicious code in autoheal-dev-cli (npm)
9 compromised versions
- May 21, 2026
Malicious code in nikou-node (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-val (npm)
1 compromised version
- May 21, 2026
Malicious code in finup-mongo-library (npm)
12 compromised versions
- May 21, 2026
Malicious code in @kedem/okdb (npm)
1 compromised version
- May 21, 2026
Malicious code in @autoheal/setup (npm)
1 compromised version
- May 21, 2026
Malicious code in payment-account-input-selector (npm)
1 compromised version
- May 21, 2026
Malicious code in @shadowmd/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in @hanssoft/baileys (npm)
1 compromised version
- May 21, 2026
Malicious code in http-uploader-dev (npm)
7 compromised versions
- May 21, 2026
Malicious code in @hanssoft/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in ionic-insta-api-wrapper (npm)
2 compromised versions
- May 21, 2026
Malicious code in @amswf/huoke (npm)
2 compromised versions
- May 21, 2026
Malicious code in @budetzz/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in oh-langfuse (npm)
18 compromised versions
- May 21, 2026
Malicious code in webservices.rest (npm)
3 compromised versions
- May 21, 2026
Malicious code in webservices.rest-utils (npm)
3 compromised versions
- May 21, 2026
Malicious code in @tiledesk/tiledesk-server (npm)
6 compromised versions
- May 21, 2026
Malicious code in @toni77777/aora (npm)
2 compromised versions
- May 21, 2026
Malicious code in turing-sdk (npm)
1 compromised version
- May 21, 2026
Malicious code in auth0-templates-scripts-utils (npm)
2 compromised versions
- May 21, 2026
Malicious code in auth0-templates-scripts (npm)
2 compromised versions
- May 21, 2026
Malicious code in sparkecoder (npm)
1 compromised version
- May 21, 2026
Malicious code in @zhengshuo888/huoke (npm)
2 compromised versions
- May 21, 2026
Malicious code in git-userhub (npm)
2 compromised versions
- May 21, 2026
Malicious code in @atlisp/mcp (npm)
1 compromised version
- May 21, 2026
Malicious code in claw_messenger (npm)
17 compromised versions
- May 21, 2026
Malicious code in dot-utils-plus (npm)
3 compromised versions
- May 21, 2026
Malicious code in @onerjs/smart-filters (npm)
2 compromised versions
- May 21, 2026
Malicious code in @zentrix23/baileys (npm)
1 compromised version
- May 21, 2026
Malicious code in fastgrc-openclaw (npm)
1 compromised version
- May 21, 2026
Malicious code in polygon-toolkit-validate (npm)
1 compromised version
- May 21, 2026
Malware in art-template
1 compromised version
- May 21, 2026
Malicious code in seedcode-facturacion-electronica (npm)
1 compromised version
- May 21, 2026
Malicious code in cerebrum-core (npm)
1 compromised version
- May 21, 2026
Malicious code in @djessicatony/folk-mcp-canary (npm)
1 compromised version
- May 21, 2026
Malicious code in @gad360/apothem (npm)
1 compromised version
- May 21, 2026
Malicious code in n8n-nodes-pentest-rce (npm)
26 compromised versions
- May 21, 2026
Malicious code in omnius (npm)
9 compromised versions
- May 21, 2026
Malicious code in @kruzer/lib-ui (npm)
2 compromised versions
- May 21, 2026
Malicious code in anthropic-shared-logger (npm)
1 compromised version
Page 86 of 4,802