Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 11, 2026
Malware in @snowsight/debug-tooling
1 compromised version
- Jun 11, 2026
Malware in @tribe-digital/shopify-starter-theme
1 compromised version
- Jun 11, 2026
Malware in @sazka/web
1 compromised version
- Jun 11, 2026
Malware in @marketplace-shared/components
1 compromised version
- Jun 11, 2026
Malware in @tenforce/toolbox-fontmap
1 compromised version
- Jun 11, 2026
Malware in @hatcha-captcha/core
1 compromised version
- Jun 11, 2026
Malware in @trackking/core
1 compromised version
- Jun 11, 2026
Malicious code in sitecore-mm-component-style (npm)
1 compromised version
- Jun 11, 2026
Malicious code in pui-diagnostics (npm)
1 compromised version
- Jun 11, 2026
Malicious code in mm-ts-utils-client (npm)
- Jun 11, 2026
Malicious code in fed-callnative (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in experian-analytics-components (npm)
1 compromised version
- Jun 11, 2026
Malware in mm-ts-utils-client
1 compromised version
- Jun 11, 2026
Malware in experian-analytics-components
1 compromised version
- Jun 11, 2026
Malware in sitecore-mm-component-style
1 compromised version
- Jun 11, 2026
Malware in archetype-style
1 compromised version
- Jun 11, 2026
Malware in fed-callnative
1 compromised version
- Jun 11, 2026
Malware in pui-diagnostics
1 compromised version
- Jun 11, 2026
Malicious code in pc-optimizer (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in unified-ui-components-library (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in ts-ecro (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in optional-cpu-features (npm)
1 compromised version
- Jun 11, 2026
Malicious code in self-certificate (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in goreleaser-run (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in parket-slot (npm)
1 compromised version
- Jun 11, 2026
Malicious code in ecto-corsair-whisper-6f3b9 (npm)
26 compromised versions
- Jun 11, 2026
Malicious code in ozonex-sdk (npm)
5 compromised versions
- Jun 11, 2026
Malware in ozonex-sdk
1 compromised version
- Jun 11, 2026
Malicious code in sn-internal-test (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in sn-internal-testjgsakjdkjadkjahsdkjad (npm)
1 compromised version
- Jun 11, 2026
Malicious code in theta-sdk (npm)
13 compromised versions
- Jun 11, 2026
Malicious code in ozone-sdk (npm)
- Jun 11, 2026
Malware in theta-sdk
1 compromised version
- Jun 11, 2026
Malware in ozone-sdk
1 compromised version
- Jun 11, 2026
Malicious code in @tt-aem-tt4a/shared-components (npm)
1 compromised version
- Jun 11, 2026
Malicious code in bibip-bip (PyPI)
1 compromised version
- Jun 11, 2026
Malware in sensivity
1 compromised version
- Jun 11, 2026
Malicious code in swagger-express-routes (npm)
1 compromised version
- Jun 11, 2026
Malicious code in routing-controls (npm)
1 compromised version
- Jun 11, 2026
Malware in routing-controls
1 compromised version
- Jun 11, 2026
Malware in swagger-express-routes
1 compromised version
- Jun 11, 2026
Malicious code in tw-fluid-type (npm)
1 compromised version
- Jun 11, 2026
Malicious code in tailwindcss-animotion (npm)
1 compromised version
- Jun 11, 2026
Malicious code in react-photo-views (npm)
1 compromised version
- Jun 11, 2026
Malware in react-photo-views
1 compromised version
- Jun 11, 2026
Malware in tailwindcss-animotion
1 compromised version
- Jun 11, 2026
Malware in tw-fluid-type
1 compromised version
- Jun 11, 2026
Malicious code in typeorm-encrypt (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in tailwindcss-merge (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in tailwindcss-animatics (npm)
Page 111 of 5,122