Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 15, 2026
Malware in um4r719-baileys
1 compromised version
- Jun 14, 2026
Malicious code in generatellm (PyPI)
3 compromised versions
- Jun 14, 2026
Malicious code in npx-whoami-demo (npm)
1 compromised version
- Jun 14, 2026
Malicious code in llamagenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in llmgenerator (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in bash8 (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in ltidiconf (npm)
1 compromised version
- Jun 14, 2026
Malicious code in ezllmgen (PyPI)
1 compromised version
- Jun 14, 2026
Malicious code in easyaillm2 (PyPI)
5 compromised versions
- Jun 14, 2026
Malicious code in easyllmai (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in npm-sandbox-research-e9f0 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-ping-c8f2a (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-c5d6 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-8b2f (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-d7e8 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-g3h4 (npm)
1 compromised version
- Jun 14, 2026
Malicious code in npm-sandbox-research-9c4e (npm)
1 compromised version
- Jun 14, 2026
Malicious code in sys-info-cli-app (npm)
3 compromised versions
- Jun 14, 2026
Malicious code in easyaillm (PyPI)
2 compromised versions
- Jun 14, 2026
Malicious code in anthropickit (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in @gbrlxvi/ts-form-utils (npm)
14 compromised versions
- Jun 13, 2026
Malicious code in salesforce-sysutils-diagnostics (PyPI)
1 compromised version
- Jun 13, 2026
Malicious code in patientdocuments (npm)
1 compromised version
- Jun 13, 2026
Malicious code in mailconfirmer (npm)
47 compromised versions
- Jun 13, 2026
Malicious code in @giftyhq/widget-components (npm)
1 compromised version
- Jun 13, 2026
Malicious code in oh-my-ashclaw (npm)
1 compromised version
- Jun 13, 2026
Malicious code in chai-utils-test (npm)
6 compromised versions
- Jun 13, 2026
Malicious code in @achuthvp/postinstall-poc (npm)
4 compromised versions
- Jun 13, 2026
Malicious code in 2fa-exe (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in environment-gate (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in oa-crm-webapi (npm)
1 compromised version
- Jun 13, 2026
Malicious code in axl-ui (npm)
1 compromised version
- Jun 13, 2026
Malicious code in xy-shared (npm)
1 compromised version
- Jun 13, 2026
Malicious code in loadninja-shared (npm)
1 compromised version
- Jun 13, 2026
Malicious code in easy-time666 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in sheratan_haha (npm)
2 compromised versions
- Jun 13, 2026
Malicious code in postcss-minify-selector-parser (npm)
9 compromised versions
- Jun 13, 2026
Malicious code in postinstall-logger-7x9z (npm)
1 compromised version
- Jun 13, 2026
Malicious code in class-synth (npm)
10 compromised versions
- Jun 13, 2026
Malicious code in node-multi-downloader (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-denv (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-stack-frames (npm)
1 compromised version
- Jun 13, 2026
Malicious code in node-app-doctor (npm)
3 compromised versions
- Jun 13, 2026
Malicious code in houzidawang807 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in houzidawang808 (npm)
1 compromised version
- Jun 13, 2026
Malicious code in houzidawang806 (npm)
23 compromised versions
- Jun 13, 2026
Malicious code in ecto_module (npm)
1 compromised version
- Jun 13, 2026
Malicious code in vite-config-react (npm)
1 compromised version
- Jun 13, 2026
Malicious code in vite-config-optimizer (npm)
1 compromised version
- Jun 13, 2026
Malicious code in @ci-lifecycle-test/postinstall-ping (npm)
1 compromised version
Page 108 of 5,122