Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 19, 2026
Malicious code in @antv/scale (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/sam (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/s2-vue (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/s2-ssr (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/s2-react-components (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/s2-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/s2 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/react-g (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/path-util (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/narrative-text-vis (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/narrative-text-schema (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/narrative-text-editor (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/my-f2-pc (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/my-f2 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/mcp-server-chart (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/mcp-server-antv (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/matrix-util (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/lite-insight (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-sdk (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-sam-assets (npm)
3 compromised versions
- May 19, 2026
Malicious code in @antv/li-p2 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-editor (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-core-assets (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-analysis-assets (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/li-aiearth-assets (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/layout-wasm (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/layout-gpu (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/larkmap (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7plot-component (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7plot (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-utils (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-three (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-source (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-scene (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-renderer (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-pass (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-mini (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-maps (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-mapkit (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-map (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-leaflet (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-layers (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-extension-g-layer (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-editor (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-draw (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-district (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-core (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-composite-layers (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/l7-component (npm)
2 compromised versions
Page 97 of 4,804