Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- Jun 10, 2026
Malware in xnder-wrapper-module
1 compromised version
- Jun 10, 2026
Malware in xnder-sdk
1 compromised version
- Jun 9, 2026
Malicious code in sb-original (npm)
1 compromised version
- Jun 9, 2026
Malicious code in bittensor-emission-tracker (PyPI)
1 compromised version
- Jun 9, 2026
Malicious code in react-pinojs (npm)
1 compromised version
- Jun 9, 2026
Malicious code in menu-filter-widget-web (npm)
1 compromised version
- Jun 9, 2026
Malicious code in mcp-server-git (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-fetch (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-postgres (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-redis (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-sequential-thinking (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-figma (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-notion (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-sentry (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-github (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in mcp-server-supabase (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in getd-eslint-rules (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-pantallas-cliente (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-typescript-eslint-rules (npm)
1 compromised version
- Jun 9, 2026
Malicious code in gethandler-api (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-transactional-web (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-handler-api (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-ui-library (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getui-library (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-content-management (npm)
1 compromised version
- Jun 9, 2026
Malicious code in getd-web-corporativa (npm)
1 compromised version
- Jun 9, 2026
Malicious code in @rockawayx/utils (npm)
1 compromised version
- Jun 9, 2026
Malicious code in ipy-rev-proxy (npm)
1 compromised version
- Jun 9, 2026
Malicious code in db-xorma (npm)
6 compromised versions
- Jun 9, 2026
Malicious code in db-dx-connector (npm)
4 compromised versions
- Jun 9, 2026
Malicious code in tailwind-form (npm)
1 compromised version
- Jun 9, 2026
durabletask 1.4.1, 1.4.2, and 1.4.3 contain malicious code distributed via a compromised maintainer account
3 compromised versions
- Jun 9, 2026
Malicious code in fhirproxy-utils (npm)
1 compromised version
- Jun 9, 2026
Malicious code in fhirproxy (npm)
1 compromised version
- Jun 9, 2026
Malicious code in @dktunited/anly-tracker-v2 (npm)
1 compromised version
- Jun 9, 2026
Malicious code in exodus-checkout-signer (npm)
1 compromised version
- Jun 9, 2026
Malicious code in grateful-checkout (npm)
1 compromised version
- Jun 9, 2026
Malicious code in checkout-signer (npm)
1 compromised version
- Jun 9, 2026
Malicious code in exodus-wallet-core (npm)
1 compromised version
- Jun 9, 2026
Malicious code in grateful-payments (npm)
1 compromised version
- Jun 9, 2026
Malicious code in exodus-solana-sdk (npm)
1 compromised version
- Jun 9, 2026
Malicious code in exodus-ethereum-sdk (npm)
1 compromised version
- Jun 9, 2026
Malicious code in exodus-secure-container (npm)
1 compromised version
- Jun 9, 2026
Malicious code in @nstrlabs/utils (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @klapp-otp/routes (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @nstrlabs/api-client (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @nstrlabs/ixel (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @nstrlabs/sdk (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @nstrlabs/shared-components (npm)
2 compromised versions
- Jun 9, 2026
Malicious code in @nstrlabs/auth (npm)
2 compromised versions
Page 116 of 5,122