Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 11, 2026
Malicious code in tailwindcss-animates-kit (npm)
- Jun 11, 2026
Malicious code in sass-formats (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in sass-format (npm)
1 compromised version
- Jun 11, 2026
Malicious code in rate-limits-flexible (npm)
1 compromised version
- Jun 11, 2026
Malicious code in rate-limit-flexible (npm)
- Jun 11, 2026
Malicious code in clsx-tailwind (npm)
1 compromised version
- Jun 11, 2026
Malware in rate-limit-flexible
1 compromised version
- Jun 11, 2026
Malware in tailwindcss-animates-kit
1 compromised version
- Jun 11, 2026
Malware in sass-formats
1 compromised version
- Jun 11, 2026
Malware in tailwindcss-animatics
1 compromised version
- Jun 11, 2026
Malware in sass-format
1 compromised version
- Jun 11, 2026
Malware in tailwindcss-merge
1 compromised version
- Jun 11, 2026
Malware in rate-limits-flexible
1 compromised version
- Jun 11, 2026
Malware in typeorm-encrypt
1 compromised version
- Jun 11, 2026
Malware in clsx-tailwind
1 compromised version
- Jun 11, 2026
Malicious code in @whatnot-web/www-legacy (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in edu-npm-dependency-chain-demo (npm)
1 compromised version
- Jun 11, 2026
Malicious code in edu-npm-postinstall-demo2 (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in chai-net-test (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in tailwind-animator-scroll (npm)
1 compromised version
- Jun 11, 2026
Malicious code in tailwind-typography-plus (npm)
1 compromised version
- Jun 11, 2026
Malicious code in claimora (npm)
1 compromised version
- Jun 11, 2026
Malicious code in janus-erc20 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in cache-section-helper (npm)
1 compromised version
- Jun 11, 2026
Malicious code in datetime-toolkit (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in internallib_v346 (npm)
6 compromised versions
- Jun 11, 2026
Malicious code in chai-as-victimed (npm)
1 compromised version
- Jun 11, 2026
Malicious code in chai-dec (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo9 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo8 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo6 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-multi-mq (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-multi-q (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo3 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo4 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo2 (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo6x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo10x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo7x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-ivo (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo8x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-demo1 (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in 0x2ai-demo9x (npm)
1 compromised version
- Jun 11, 2026
Malicious code in 0x2ai-zoe (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in backup-my-data (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in clean-my-pc (npm)
6 compromised versions
- Jun 11, 2026
Malicious code in sysbu (npm)
3 compromised versions
- Jun 11, 2026
Malicious code in sysau (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in sysnu (npm)
2 compromised versions
- Jun 11, 2026
Malicious code in coderzero (npm)
5 compromised versions
Page 112 of 5,122