Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,078 total in npm · sorted newest first- May 21, 2026
Malicious code in wallet-security-checker (npm)
12 compromised versions
- May 21, 2026
Malicious code in polymarket-trading-cli (npm)
- May 21, 2026
Malicious code in polymarket-trader (npm)
- May 21, 2026
Malicious code in polymarket-trade (npm)
1 compromised version
- May 21, 2026
Malicious code in polymarket-terminal (npm)
- May 21, 2026
Malicious code in polymarket-copy-trading (npm)
1 compromised version
- May 21, 2026
Malicious code in polymarket-claude-code (npm)
1 compromised version
- May 21, 2026
Malicious code in polymarket-bot (npm)
- May 21, 2026
Malicious code in polymarket-auto-trade (npm)
- May 21, 2026
Malicious code in polymarket-ai-agent (npm)
- May 21, 2026
Malicious code in mnemonic-safety-check (npm)
15 compromised versions
- May 21, 2026
Malicious code in eth-wallet-sentinel (npm)
15 compromised versions
- May 21, 2026
Malicious code in defi-threat-scanner (npm)
14 compromised versions
- May 21, 2026
Malicious code in crypto-credential-scanner (npm)
14 compromised versions
- May 21, 2026
Malicious code in chain-key-validator (npm)
14 compromised versions
- May 20, 2026
Malicious code in claude-internal-utils (npm)
1 compromised version
- May 20, 2026
Malicious code in deployment-key-auditor (npm)
15 compromised versions
- May 20, 2026
Malicious code in defi-env-auditor (npm)
14 compromised versions
- May 20, 2026
Malicious code in solidity-deploy-guard (npm)
13 compromised versions
- May 20, 2026
Malicious code in @cometix/claude-code (npm)
2 compromised versions
- May 20, 2026
Malicious code in @jemavidev/betteragents-pi (npm)
8 compromised versions
- May 20, 2026
Malicious code in supership-scan (npm)
1 compromised version
- May 20, 2026
Malicious code in create-kachow (npm)
1 compromised version
- May 20, 2026
Malicious code in chain-async-test (npm)
1 compromised version
- May 20, 2026
Malicious code in vite-json-config (npm)
1 compromised version
- May 20, 2026
Malicious code in @signetai/signet-memory-openclaw (npm)
2 compromised versions
- May 20, 2026
Malicious code in @link-assistant/hive-mind (npm)
6 compromised versions
- May 20, 2026
Malicious code in @elvatis_com/openclaw-cli-bridge-elvatis (npm)
1 compromised version
- May 20, 2026
Malicious code in @ctrl/plex (npm)
1 compromised version
- May 20, 2026
Malicious code in @tailwind-core/oxide-linux-x64-gnu (npm)
1 compromised version
- May 20, 2026
Malicious code in @aswinsparky/api (npm)
1 compromised version
- May 20, 2026
Malicious code in bolt-delivery-menu-app (npm)
1 compromised version
- May 20, 2026
Malicious code in @saidddddddddd/somethingelse (npm)
1 compromised version
- May 20, 2026
Malware in @antv/li-sam-assets
1 compromised version
- May 20, 2026
Malicious code in @aledan007/tester (npm)
1 compromised version
- May 20, 2026
Malicious code in @vivaux/telemetry (npm)
1 compromised version
- May 20, 2026
Malicious code in cb-wallet-http (npm)
1 compromised version
- May 20, 2026
Malware in @antv/a8
1 compromised version
- May 20, 2026
Malware in @antv/adjust
1 compromised version
- May 20, 2026
Malicious code in ethers-wallet-package (npm)
1 compromised version
- May 20, 2026
Malicious code in private-next-pages (npm)
1 compromised version
- May 20, 2026
Malicious code in @self-evolving-harness/kivo (npm)
1 compromised version
- May 20, 2026
Malicious code in iv-stubborn (npm)
1 compromised version
- May 20, 2026
Malicious code in iv-bloomfilter (npm)
- May 20, 2026
Malicious code in @doctolib-apps/native-personalized-services (npm)
1 compromised version
- May 20, 2026
Malware in iv-bloomfilter
1 compromised version
- May 20, 2026
Malware in @doctolib-apps/native-personalized-services
1 compromised version
- May 20, 2026
Malware in iv-stubborn
1 compromised version
- May 20, 2026
Malware in @limebike/supreme
1 compromised version
- May 20, 2026
Malware in @limebike/supreme-date-pickers
1 compromised version
Page 87 of 4,802