Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 10, 2026
Malicious code in @easytipsportal/pos-adapters (npm)
- Jun 10, 2026
Malware in @easytipsportal/pos-adapters
1 compromised version
- Jun 10, 2026
Malware in get-deps-path
1 compromised version
- Jun 10, 2026
Malicious code in argoncrypt (npm)
2 compromised versions
- Jun 10, 2026
Malware in argoncrypt
1 compromised version
- Jun 10, 2026
Malware in python-utils
1 compromised version
- Jun 10, 2026
Malware in use-context-selector-tony
1 compromised version
- Jun 10, 2026
Malware in react-tracked-tony
1 compromised version
- Jun 10, 2026
Malicious code in martinez-polygon-clipping-simul-dalton (npm)
- Jun 10, 2026
Malware in martinez-polygon-clipping-simul-dalton
1 compromised version
- Jun 10, 2026
Malware in martinez-polygon-clipping-tony
1 compromised version
- Jun 10, 2026
Malicious code in solc-compiler (npm)
- Jun 10, 2026
Malicious code in solc-abi (npm)
- Jun 10, 2026
Malicious code in npmjs_web3-common (npm)
- Jun 10, 2026
Malicious code in npmjs_truffle-helper (npm)
- Jun 10, 2026
Malware in npmjs_web3-util
1 compromised version
- Jun 10, 2026
Malware in npmjs_truffle-helper
1 compromised version
- Jun 10, 2026
Malware in solc-abi
1 compromised version
- Jun 10, 2026
Malware in npmjs_web3-common
1 compromised version
- Jun 10, 2026
Malware in solc-compiler
1 compromised version
- Jun 10, 2026
Malicious code in solidity-abi (npm)
- Jun 10, 2026
Malware in npmjs_ethers-common
1 compromised version
- Jun 10, 2026
Malware in ethers-wordlist
1 compromised version
- Jun 10, 2026
Malware in npmjs_solc-helper
1 compromised version
- Jun 10, 2026
Malware in npmjs_hardhat-common
1 compromised version
- Jun 10, 2026
Malware in solidity-abi
1 compromised version
- Jun 10, 2026
Malicious code in plugin-fastify (npm)
- Jun 10, 2026
Malware in plugin-fastify
1 compromised version
- Jun 10, 2026
Malicious code in graphbase-js (npm)
6 compromised versions
- Jun 10, 2026
Malware in graphbase-js
1 compromised version
- Jun 10, 2026
Malicious code in @validator-sdk/pubkey (npm)
8 compromised versions
- Jun 10, 2026
Malicious code in @validate-ethereum-address/core (npm)
4 compromised versions
- Jun 10, 2026
Malware in @validator-sdk/pubkey
1 compromised version
- Jun 10, 2026
Malware in @validate-ethereum-address/core
1 compromised version
- Jun 10, 2026
Malicious code in @solana-launchpad/sdk (npm)
14 compromised versions
- Jun 10, 2026
Malicious code in @meme-sdk/trade (npm)
2 compromised versions
- Jun 10, 2026
Malware in @meme-sdk/trade
1 compromised version
- Jun 10, 2026
Malware in @solana-launchpad/sdk
1 compromised version
- Jun 10, 2026
Malicious code in @validate-sdk/v2 (npm)
20 compromised versions
- Jun 10, 2026
Malware in @validate-sdk/v2
1 compromised version
- Jun 10, 2026
Malicious code in ethers-jss (npm)
1 compromised version
- Jun 10, 2026
Malicious code in coinbase-wallet-utils (npm)
- Jun 10, 2026
Malware in ethers-jss
1 compromised version
- Jun 10, 2026
Malware in coinbase-wallet-utils
1 compromised version
- Jun 10, 2026
Malicious code in csc154-internall-depend (npm)
- Jun 10, 2026
Malware in csc154-internall-depend
1 compromised version
- Jun 10, 2026
Malicious code in @builder.io/dev-tools (npm)
1 compromised version
- Jun 10, 2026
Malware in @builder.io/dev-tools
1 compromised version
- Jun 10, 2026
Malicious code in xnder-wrapper-module (npm)
3 compromised versions
- Jun 10, 2026
Malicious code in xnder-sdk (npm)
2 compromised versions
Page 115 of 5,122