Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 19, 2026
Malicious code in @antv/l7 (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/knowledge (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/istanbul (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/interaction (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/insight-component (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/infographic (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/hierarchy (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/graphlib (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/graphin-icons (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/graphin-graphscope (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/graphin-components (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/graphin (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gpt-vis-ssr (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gpt-vis (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gl-matrix (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/github-config-cli (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-theme-antd (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-sdk-app (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-sdk (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-public-data (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-mock-data (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-common-components (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-cli (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-xlab (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-tugraph-analytics (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-tugraph (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-scene (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-neo4j (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-janusgraph (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-hugegraph (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-graphscope (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-galaxybase (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-basic (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gi-assets-algorithm (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/geo-coord (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/gatsby-theme (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-wx (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-ssr (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-react-node (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-plugins (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-plugin-map-view (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-plugin (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-pc (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-mobile (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-extension-react (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-extension-3d (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-element (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-editor (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-core (npm)
2 compromised versions
- May 19, 2026
Malicious code in @antv/g6-cli (npm)
2 compromised versions
Page 98 of 4,804