Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 19, 2026
Malware in @antv/g6
1 compromised version
- May 19, 2026
Malware in @antv/g2
1 compromised version
- May 19, 2026
Malware in @antv/graphlib
1 compromised version
- May 19, 2026
Malware in @antv/x6
1 compromised version
- May 19, 2026
Malware in @antv/x6-geometry
1 compromised version
- May 19, 2026
Malware in @antv/gi-assets-advance
1 compromised version
- May 19, 2026
Malware in @antv/g-image-exporter
1 compromised version
- May 19, 2026
Malware in byte-parser
1 compromised version
- May 19, 2026
Malware in @openclaw-cn/libsignal
1 compromised version
- May 19, 2026
Malware in @openclaw-cn/toutiao-ops
1 compromised version
- May 19, 2026
Malware in @starmind/collector-cli
1 compromised version
- May 19, 2026
Malware in @openclaw-cn/cli
1 compromised version
- May 19, 2026
Malware in @openclaw-cn/feishu
1 compromised version
- May 19, 2026
Malware in openclaw-cn
1 compromised version
- May 19, 2026
Malicious code in @apps-home-dashboard/events (npm)
1 compromised version
- May 19, 2026
Malicious code in @cap-js/openapi (npm)
1 compromised version
- May 19, 2026
Malicious code in openclaw-cn (npm)
1 compromised version
- May 19, 2026
Malicious code in @starmind/collector-cli (npm)
1 compromised version
- May 19, 2026
Malicious code in @openclaw-cn/toutiao-ops (npm)
1 compromised version
- May 19, 2026
Malicious code in @openclaw-cn/libsignal (npm)
1 compromised version
- May 19, 2026
Malicious code in @openclaw-cn/feishu (npm)
1 compromised version
- May 19, 2026
Malicious code in @openclaw-cn/cli (npm)
1 compromised version
- May 19, 2026
Malicious code in vfat-tools (npm)
1 compromised version
- May 19, 2026
Malicious code in sickle-wrapper (npm)
1 compromised version
- May 19, 2026
Malicious code in xmorse (npm)
2 compromised versions
- May 19, 2026
Malicious code in word-width (npm)
2 compromised versions
- May 19, 2026
Malicious code in uri-parse (npm)
2 compromised versions
- May 19, 2026
Malicious code in timeago.js (npm)
2 compromised versions
- May 19, 2026
Malicious code in timeago-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in slice.js (npm)
2 compromised versions
- May 19, 2026
Malicious code in size-sensor (npm)
3 compromised versions
- May 19, 2026
Malicious code in ribbon.js (npm)
1 compromised version
- May 19, 2026
Malicious code in relationship.js (npm)
2 compromised versions
- May 19, 2026
Malicious code in react-adsense (npm)
2 compromised versions
- May 19, 2026
Malicious code in onfire.js (npm)
2 compromised versions
- May 19, 2026
Malicious code in miz (npm)
2 compromised versions
- May 19, 2026
Malicious code in mcp-mermaid (npm)
2 compromised versions
- May 19, 2026
Malicious code in mcp-echarts (npm)
2 compromised versions
- May 19, 2026
Malicious code in lint-md-cli (npm)
2 compromised versions
- May 19, 2026
Malicious code in lint-md (npm)
2 compromised versions
- May 19, 2026
Malicious code in limit-size (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-url-loader (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-random-mock (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-less-loader (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-expect (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-electron (npm)
2 compromised versions
- May 19, 2026
Malicious code in jest-date-mock (npm)
3 compromised versions
- May 19, 2026
Malicious code in jest-canvas-mock (npm)
3 compromised versions
- May 19, 2026
Malicious code in gantt-for-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in fixed-round (npm)
2 compromised versions
Page 95 of 4,804