Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
239,899 total in npm · sorted newest first- Jul 10, 2026
Malicious code in motiondnb (npm)
- Jul 10, 2026
Malicious code in react-jsonwebtoken (npm)
3 compromised versions
- Jul 10, 2026
Malicious code in theta-sdk-js (npm)
4 compromised versions
- Jul 10, 2026
Malicious code in polygon-gamma-apis (npm)
2 compromised versions
- Jul 10, 2026
Malicious code in polygon-gama-apis (npm)
1 compromised version
- Jul 10, 2026
Malicious code in mdb-vite (npm)
1 compromised version
- Jul 10, 2026
Malicious code in polymarket-gamma-apis (npm)
- Jul 10, 2026
Malicious code in marked-prettier (npm)
2 compromised versions
- Jul 10, 2026
Malicious code in eslint-jest (npm)
3 compromised versions
- Jul 10, 2026
Malicious code in stella-ai-cli (npm)
8 compromised versions
- Jul 10, 2026
Malicious code in stella-coder (npm)
11 compromised versions
- Jul 10, 2026
Malicious code in uac-package (npm)
5 compromised versions
- Jul 10, 2026
Malicious code in express-session-kit (npm)
3 compromised versions
- Jul 10, 2026
Malicious code in transform-es2015-sticky-regex (npm)
1 compromised version
- Jul 10, 2026
Malicious code in type-elint (npm)
1 compromised version
- Jul 10, 2026
Malicious code in ohcm-culture-formatting (npm)
1 compromised version
- Jul 10, 2026
Malicious code in eth-react-redirection (npm)
3 compromised versions
- Jul 10, 2026
Malicious code in rtc-integration-frontend-sdk (npm)
1 compromised version
- Jul 10, 2026
Malicious code in type-plint (npm)
1 compromised version
- Jul 10, 2026
Malicious code in dowload_ebok_superior_spider_man_1_marvel_collection_by_dan_slott_tc3wo (npm)
- Jul 10, 2026
Malicious code in dowload_ebok_river_of_time_by_naomi_judd_marcia_wilkie_i1ze3 (npm)
- Jul 10, 2026
Malicious code in dowload_ebok_programming_in_haskell_second_edition_by_graham_hutton_c19wm (npm)
- MAL-2026-10121Malwarenpmdowload_ebok_leila_a_filha_de_charles_by_denise_correa_de_macedo_arnold_de_numiers_o103jJul 10, 2026
Malicious code in dowload_ebok_leila_a_filha_de_charles_by_denise_correa_de_macedo_arnold_de_numiers_o103j (npm)
- Jul 10, 2026
Malicious code in dowload_ebok_wrath_of_the_gods_by_j_robert_kennedy_61o88 (npm)
- MAL-2026-10122Malwarenpmdowload_ebok_murder_in_plain_english_by_michael_arntfield_marcel_danesi_uletoJul 10, 2026
Malicious code in dowload_ebok_murder_in_plain_english_by_michael_arntfield_marcel_danesi_uleto (npm)
- Jul 10, 2026
Malicious code in dowload_ebok_goodbye_things_by_fumio_sasaki_ptu02 (npm)
- Jul 10, 2026
Malicious code in execfences (npm)
7 compromised versions
- Jul 10, 2026
Malicious code in nodemon-slint (npm)
1 compromised version
- Jul 10, 2026
Malicious code in driftpin (npm)
1 compromised version
- Jul 10, 2026
Malicious code in fmt-date-lite (npm)
1 compromised version
- Jul 10, 2026
Malicious code in jwtmethod (npm)
1 compromised version
- Jul 10, 2026
Malicious code in workspace-scripts (npm)
- Jul 10, 2026
Malicious code in workspace-lint (npm)
- Jul 10, 2026
Malicious code in nodemon-patch (npm)
2 compromised versions
- Jul 10, 2026
Malicious code in nodepack-daemon (npm)
1 compromised version
- Jul 9, 2026
Malicious code in dc-repro (npm)
1 compromised version
- Jul 9, 2026
Malicious code in date-kit-lite (npm)
1 compromised version
- Jul 9, 2026
Malicious code in pxpure8 (npm)
1 compromised version
- Jul 9, 2026
Malicious code in px8my (npm)
6 compromised versions
- Jul 9, 2026
Malicious code in validator-string (npm)
1 compromised version
- Jul 9, 2026
Malicious code in url-func-registry (npm)
1 compromised version
- Jul 9, 2026
Malicious code in security-node (npm)
1 compromised version
- Jul 9, 2026
Malicious code in optimize-regex (npm)
1 compromised version
- Jul 9, 2026
Malicious code in rallycoding (npm)
1 compromised version
- Jul 9, 2026
Malicious code in polipoli-pak (npm)
2 compromised versions
- Jul 9, 2026
Malicious code in @kl-starfish/test-01 (npm)
1 compromised version
- Jul 9, 2026
Malicious code in fastify-addone (npm)
2 compromised versions
- Jul 9, 2026
Malicious code in guest-app-ui (npm)
1 compromised version
- Jul 9, 2026
Malicious code in fury_frontend-andes-ui (npm)
2 compromised versions
- Jul 9, 2026
Malicious code in @equansservices/setup (npm)
4 compromised versions
Page 9 of 4,798