Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- May 29, 2026
Malware in @citi-icg-158830/elemental-ui-react
1 compromised version
- May 29, 2026
Malware in @breezeai-frontend/cargo-ui
1 compromised version
- May 29, 2026
Malware in @antv/g6-editor
1 compromised version
- May 29, 2026
Malware in @antv/gpt-vis
1 compromised version
- May 29, 2026
Malware in @clearpool/table
1 compromised version
- May 29, 2026
Malware in apexpro-node
1 compromised version
- May 29, 2026
Malware in ally-badges
1 compromised version
- May 29, 2026
Malware in @lint-md/cli
1 compromised version
- May 29, 2026
Malware in @breezeai-frontend/i18n-config
1 compromised version
- May 29, 2026
Malware in @antv/x6-plugin-transform
1 compromised version
- May 29, 2026
Malware in @antv/l7-leaflet
1 compromised version
- May 29, 2026
Malware in @antv/x6-react-components
1 compromised version
- May 29, 2026
Malware in @antv/s2
1 compromised version
- May 29, 2026
Malware in @antv/t8
1 compromised version
- May 29, 2026
Malware in @antv/wx-f2
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile-canvas-element
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-canvas-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-gesture
1 compromised version
- May 29, 2026
Malware in @antv/g-gesture
1 compromised version
- May 29, 2026
Malware in @antv/g6-extension-react
1 compromised version
- May 29, 2026
Malware in @antv/li-sdk
1 compromised version
- May 29, 2026
Malware in @antv/geo-coord
1 compromised version
- May 29, 2026
Malware in @antv/s2-react
1 compromised version
- May 29, 2026
Malware in @antv/l7-layers
1 compromised version
- May 29, 2026
Malware in @antv/l7-core
1 compromised version
- May 29, 2026
Malware in @antv/f-test-utils
1 compromised version
- May 29, 2026
Malware in @antv/dom-util
1 compromised version
- May 29, 2026
Malware in @antv/f-lottie
1 compromised version
- May 29, 2026
Malware in @allybank/ally-sdk
1 compromised version
- May 29, 2026
Malware in @antv/g2-extension-plot
1 compromised version
- May 29, 2026
Malware in @antv/g-canvaskit
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-3d
1 compromised version
- May 29, 2026
Malware in @antv/f6-ui
1 compromised version
- May 29, 2026
Malware in @antv/l7-component
1 compromised version
- May 29, 2026
Malware in @antv/g-components
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-device-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-plugin-rough-svg-renderer
1 compromised version
- May 29, 2026
Malware in @antv/g-lite
1 compromised version
- May 29, 2026
Malware in @antv/g-webgpu-engine
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile-webgl
1 compromised version
- May 29, 2026
Malware in @antv/ava-react
1 compromised version
- May 29, 2026
Malware in @antv/g-mobile
1 compromised version
- May 29, 2026
Malware in @antv/g-lottie-player
1 compromised version
- May 29, 2026
Malware in @allyfinancial/allyfinancial-api
1 compromised version
- May 29, 2026
Malware in @antv/dw-random
1 compromised version
- May 29, 2026
Malware in customerdigital-ui-containers-lib
1 compromised version
- May 29, 2026
Malware in hellowornd
1 compromised version
- May 29, 2026
Malware in buffer-util-extend
1 compromised version
- May 29, 2026
Malicious code in tiny-naturalsort (npm)
- May 29, 2026
Malware in tiny-naturalsort
1 compromised version
Page 130 of 5,122