Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,077 total · sorted newest first- May 27, 2026
Malware in chai-as-repaired
1 compromised version
- May 27, 2026
Malicious code in editorial-code (npm)
1 compromised version
- May 27, 2026
Malicious code in mse-authentication (npm)
1 compromised version
- May 27, 2026
Malicious code in editorial-mse-authentication-ui (npm)
1 compromised version
- May 27, 2026
Malicious code in quatres (PyPI)
1 compromised version
- May 26, 2026
Malicious code in hmacsync (PyPI)
1 compromised version
- May 26, 2026
Malicious code in unleash-js (npm)
1 compromised version
- May 26, 2026
Malicious code in wm-mapper (npm)
1 compromised version
- May 26, 2026
Malicious code in loadtest-browser-lib (npm)
1 compromised version
- May 26, 2026
Malicious code in cdktn-provider-datadog (PyPI)
1 compromised version
- May 26, 2026
Malicious code in cdktn-provider-newrelic (PyPI)
1 compromised version
- May 26, 2026
Malicious code in @slipless/sdk (npm)
1 compromised version
- May 26, 2026
Malicious code in pywingui (PyPI)
5 compromised versions
- May 26, 2026
Malicious code in chainix (npm)
1 compromised version
- May 26, 2026
Malicious code in token-me-uk (npm)
1 compromised version
- May 26, 2026
Malicious code in datapipe-util (PyPI)
2 compromised versions
- May 26, 2026
Malicious code in amaco-os (npm)
2 compromised versions
- May 26, 2026
Malicious code in saturn-bail (npm)
1 compromised version
- May 26, 2026
Malicious code in metricflow-tracker (npm)
1 compromised version
- May 26, 2026
Malicious code in vectordb-engine (PyPI)
1 compromised version
- May 26, 2026
Malicious code in baidubsrc (PyPI)
1 compromised version
- May 26, 2026
Malicious code in docontrol-mcp (PyPI)
1 compromised version
- May 26, 2026
Malicious code in binproto (PyPI)
1 compromised version
- May 26, 2026
Malicious code in web3.prc (npm)
- May 26, 2026
Malicious code in web3-prices (npm)
- May 26, 2026
Malicious code in int-node (npm)
- May 26, 2026
Malware in int-node
1 compromised version
- May 26, 2026
Malware in web3.prc
1 compromised version
- May 26, 2026
Malware in web3-prices
1 compromised version
- May 26, 2026
Malware in @izumiswap/sdk
1 compromised version
- May 26, 2026
Malicious code in @fhkry/baileys (npm)
1 compromised version
- May 26, 2026
Malicious code in shop-minis (npm)
1 compromised version
- May 26, 2026
Malicious code in jsonlogbundler (npm)
3 compromised versions
- May 26, 2026
Malicious code in fastjsonlog (npm)
2 compromised versions
- May 26, 2026
Malware in jsonlogbundler
1 compromised version
- May 26, 2026
Malware in fastjsonlog
1 compromised version
- May 26, 2026
Malware in jsonbson
1 compromised version
- May 26, 2026
Malware in corelia
1 compromised version
- May 26, 2026
Malicious code in xlsx-enhanced (npm)
- May 26, 2026
Malicious code in pdf-lib-enhanced (npm)
1 compromised version
- May 26, 2026
Malware in xlsx-enhanced
1 compromised version
- May 26, 2026
Malware in solidity-coverage-plus
1 compromised version
- May 26, 2026
Malware in pdf-lib-enhanced
1 compromised version
- May 26, 2026
Malware in license-checker-plus
1 compromised version
- May 26, 2026
Malware in lynx-keeper
1 compromised version
- May 26, 2026
Malware in hardhat-gas-analytics
1 compromised version
- May 26, 2026
Malware in lynx-keeper-cli
1 compromised version
- May 26, 2026
Malware in zest-product
1 compromised version
- May 26, 2026
Malicious code in m-at-star-tools (PyPI)
3 compromised versions
- May 26, 2026
Malicious code in shizukyu (npm)
1 compromised version
Page 136 of 5,122