Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 16, 2026
Malicious code in chai-guid (npm)
1 compromised version
- Jun 16, 2026
Malicious code in chai-plugin-kit (npm)
1 compromised version
- Jun 16, 2026
Malicious code in chai-plugin (npm)
4 compromised versions
- Jun 16, 2026
Malicious code in chai-solidity-testkit (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in chai-as-decrypted (npm)
1 compromised version
- Jun 16, 2026
Malicious code in uidai_reusable_components (npm)
5 compromised versions
- Jun 16, 2026
Malicious code in easyllmai (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in caspian-day-js (npm)
1 compromised version
- Jun 16, 2026
Malicious code in strict-engine-peer (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in jest-test-plugin-utils (npm)
4 compromised versions
- Jun 16, 2026
Malicious code in noderzero (npm)
4 compromised versions
- Jun 16, 2026
Malicious code in create-vercel-integration (npm)
1 compromised version
- Jun 16, 2026
Malicious code in @dsft/ft-utils (npm)
1 compromised version
- Jun 16, 2026
Malicious code in @dsft/ft-element (npm)
1 compromised version
- Jun 16, 2026
Malicious code in stripe-cli-init-plugin (npm)
1 compromised version
- Jun 16, 2026
Malicious code in conducts (npm)
- Jun 16, 2026
Malware in conducts
1 compromised version
- Jun 16, 2026
Malicious code in atlassian-forge-skills (npm)
1 compromised version
- Jun 16, 2026
Malicious code in claude-jar (npm)
1 compromised version
- Jun 16, 2026
Malicious code in @vantuz/sdk-core (npm)
- Jun 16, 2026
Malware in @vantuz/sdk-core
1 compromised version
- Jun 16, 2026
Malware in mailconfirmer
1 compromised version
- Jun 16, 2026
Malicious code in middleware-jwt (npm)
1 compromised version
- Jun 16, 2026
Malware in middleware-jwt
1 compromised version
- Jun 16, 2026
Malicious code in vortnode (npm)
1 compromised version
- Jun 16, 2026
Malicious code in wordpad-text-ui (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in obfus-jsxy (npm)
1 compromised version
- Jun 16, 2026
Malware in obfus-jsxy
1 compromised version
- Jun 16, 2026
Malicious code in redis-xyz (npm)
1 compromised version
- Jun 16, 2026
Malware in redis-xyz
1 compromised version
- Jun 16, 2026
Malicious code in ioredis-os (npm)
1 compromised version
- Jun 16, 2026
Malware in ioredis-os
1 compromised version
- Jun 16, 2026
Malicious code in redis-type-os (npm)
8 compromised versions
- Jun 16, 2026
Malware in redis-type-os
1 compromised version
- Jun 16, 2026
Malicious code in nat-ulid (npm)
1 compromised version
- Jun 16, 2026
Malware in nat-ulid
1 compromised version
- Jun 16, 2026
Malicious code in cache-compat-utils (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in temp-development-package-test (PyPI)
4 compromised versions
- Jun 16, 2026
Malicious code in check-ulid (npm)
1 compromised version
- Jun 16, 2026
Malware in check-ulid
1 compromised version
- Jun 16, 2026
Malicious code in myfirstpackagetestaaa (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in aaaazzzzaz (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in datacamp-light (PyPI)
1 compromised version
- Jun 16, 2026
Malicious code in hot-validation-sdk (npm)
1 compromised version
- Jun 16, 2026
Malware in hot-validation-sdk
1 compromised version
- Jun 16, 2026
Malicious code in rbac-auth (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in pampipes (npm)
4 compromised versions
- Jun 16, 2026
Malicious code in lucide-next (npm)
- Jun 16, 2026
Malicious code in fabric-graphics (npm)
1 compromised version
- Jun 16, 2026
Malware in rbac-auth
1 compromised version
Page 104 of 5,122