Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 16, 2026
Malware in fabric-graphics
1 compromised version
- Jun 16, 2026
Malware in auth-basic-vault
1 compromised version
- Jun 16, 2026
Malware in pampipes
1 compromised version
- Jun 16, 2026
Malware in lucide-next
1 compromised version
- Jun 16, 2026
Malware in authcascade
1 compromised version
- Jun 16, 2026
Malware in swplayer-react-sl
1 compromised version
- Jun 16, 2026
Malware in simple-auth-basic
1 compromised version
- Jun 16, 2026
Malicious code in terminal-structured-logger (npm)
3 compromised versions
- Jun 16, 2026
Malicious code in terminal-pretty-logger (npm)
21 compromised versions
- Jun 16, 2026
Malware in terminal-structured-logger
1 compromised version
- Jun 16, 2026
Malware in terminal-pretty-logger
1 compromised version
- Jun 16, 2026
Malicious code in npmjs-doc-builder (npm)
- Jun 16, 2026
Malicious code in bign.tsm (npm)
- Jun 16, 2026
Malware in bign.tsm
1 compromised version
- Jun 16, 2026
Malware in npmjs-doc-builder
1 compromised version
- Jun 16, 2026
Malicious code in @ts-internal/shared-lib (npm)
1 compromised version
- Jun 16, 2026
Malicious code in vitest-pro (npm)
2 compromised versions
- Jun 16, 2026
Malicious code in solana-js-client (npm)
1 compromised version
- Jun 16, 2026
Malicious code in solana-mev-bot (npm)
1 compromised version
- Jun 16, 2026
Malicious code in carousel-controller-mixin (npm)
1 compromised version
- Jun 16, 2026
Malicious code in setka-editor (npm)
3 compromised versions
- Jun 16, 2026
Malicious code in event-metrics-q3x7 (npm)
9 compromised versions
- Jun 16, 2026
Malicious code in metrics-pipeline-d8k2 (npm)
21 compromised versions
- Jun 16, 2026
Malware in flow-lending-sdk
1 compromised version
- Jun 16, 2026
Malware in flow-lending
1 compromised version
- Jun 16, 2026
Malware in bodega-sdk
1 compromised version
- Jun 16, 2026
Malware in janus-ft
1 compromised version
- Jun 16, 2026
Malware in flowcardano
1 compromised version
- Jun 16, 2026
Malware in surf-lending
1 compromised version
- Jun 16, 2026
Malware in flowdefi
1 compromised version
- Jun 16, 2026
Malware in janus-erc20
1 compromised version
- Jun 16, 2026
Malware in janus-flow
1 compromised version
- Jun 16, 2026
Malicious code in tailwind-typography-style (npm)
1 compromised version
- Jun 16, 2026
Malware in tailwind-typography-style
1 compromised version
- Jun 16, 2026
Malicious code in sp-api-dev-assistant-mcp-server (npm)
1 compromised version
- Jun 16, 2026
Malware in sp-api-dev-assistant-mcp-server
1 compromised version
- Jun 16, 2026
Malware in worker-build
1 compromised version
- Jun 16, 2026
Malware in ttspc-server-sample
1 compromised version
- Jun 16, 2026
Malicious code in epm-service-module-v2 (npm)
4 compromised versions
- Jun 16, 2026
Malware in epm-service-module-v2
1 compromised version
- Jun 16, 2026
Malware in websocket-slot
1 compromised version
- Jun 15, 2026
Malware in sn-internal-test
1 compromised version
- Jun 15, 2026
Malware in sn-internal-testjgsakjdkjadkjahsdkjad
1 compromised version
- Jun 15, 2026
Malicious code in vemos-sdk (npm)
1 compromised version
- Jun 15, 2026
Malware in vemos-sdk
1 compromised version
- Jun 15, 2026
Malware in sb-original
1 compromised version
- Jun 15, 2026
Malware in web-model-bridge
1 compromised version
- Jun 15, 2026
Malicious code in richtext-editor-ui (npm)
1 compromised version
- Jun 15, 2026
Malware in richtext-editor-ui
1 compromised version
- Jun 15, 2026
Malicious code in reading-cookies (npm)
1 compromised version
Page 105 of 5,122