Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,236 total · sorted newest first- May 21, 2026
Malicious code in cryptoco-auth (npm)
9 compromised versions
- May 21, 2026
Malicious code in cloudsmith-vsc (npm)
1 compromised version
- May 21, 2026
Malicious code in @ornexus/neocortex (npm)
2 compromised versions
- May 21, 2026
Malicious code in fnd-stores (npm)
2 compromised versions
- May 21, 2026
Malicious code in pubnub-moderation-tool (npm)
1 compromised version
- May 21, 2026
Malicious code in moneykit-cardano-demo (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-vite (npm)
1 compromised version
- May 21, 2026
Malicious code in @jaggle/resizeobserves (npm)
20 compromised versions
- May 21, 2026
Malicious code in @kyungseopk1m/holidays-kr (npm)
1 compromised version
- May 21, 2026
Malicious code in maxixy-cli (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-tuned (npm)
1 compromised version
- May 21, 2026
Malicious code in @pulse-web-platform-core/scripts-loader (npm)
1 compromised version
- May 21, 2026
Malicious code in veteran (npm)
3 compromised versions
- May 21, 2026
Malicious code in tailwindcss-themers (npm)
- May 21, 2026
Malicious code in tailwindcss-theme-custom (npm)
- May 21, 2026
Malware in tailwindcss-theme-custom
1 compromised version
- May 21, 2026
Malware in tailwindcss-themers
1 compromised version
- May 21, 2026
Malicious code in celonix-otp-react (npm)
5 compromised versions
- May 21, 2026
Malicious code in json-spectaculation (npm)
1 compromised version
- May 21, 2026
Malware in json-spectaculation
1 compromised version
- May 21, 2026
Malicious code in veteran-proxy (npm)
1 compromised version
- May 21, 2026
Malicious code in utils-mf (npm)
10 compromised versions
- May 21, 2026
Malicious code in pgrayy-wasmtime (PyPI)
2 compromised versions
- May 21, 2026
Malicious code in @dekuzxc/nexca (npm)
3 compromised versions
- May 21, 2026
Malicious code in @vino.tian/vibe-kanban (npm)
3 compromised versions
- May 21, 2026
Malicious code in lognest (PyPI)
5 compromised versions
- May 21, 2026
Malicious code in @lokuma/cli (npm)
1 compromised version
- May 21, 2026
Malicious code in ihubinternal (npm)
1 compromised version
- May 21, 2026
Malicious code in @luke-101141/nobody (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-as-afforded (npm)
- May 21, 2026
Malware in chai-as-afforded
1 compromised version
- May 21, 2026
Malicious code in n8n-nodes-whatsapp-business-api-by-automations-builder (npm)
1 compromised version
- May 21, 2026
Malicious code in tensor-compute (PyPI)
1 compromised version
- May 21, 2026
Malicious code in zest-product (npm)
2 compromised versions
- May 21, 2026
Malicious code in autoheal-dev-cli (npm)
9 compromised versions
- May 21, 2026
Malicious code in nikou-node (npm)
1 compromised version
- May 21, 2026
Malicious code in chai-val (npm)
1 compromised version
- May 21, 2026
Malicious code in finup-mongo-library (npm)
12 compromised versions
- May 21, 2026
Malicious code in @kedem/okdb (npm)
1 compromised version
- May 21, 2026
Malicious code in @autoheal/setup (npm)
1 compromised version
- May 21, 2026
Malicious code in payment-account-input-selector (npm)
1 compromised version
- May 21, 2026
Malicious code in nvidia-nat-semantic-kernel (PyPI)
3 compromised versions
- May 21, 2026
Malicious code in @shadowmd/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in @hanssoft/baileys (npm)
1 compromised version
- May 21, 2026
Malicious code in http-uploader-dev (npm)
7 compromised versions
- May 21, 2026
Malicious code in @hanssoft/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in ionic-insta-api-wrapper (npm)
2 compromised versions
- May 21, 2026
Malicious code in @amswf/huoke (npm)
2 compromised versions
- May 21, 2026
Malicious code in @budetzz/libsignal-node (npm)
1 compromised version
- May 21, 2026
Malicious code in oh-langfuse (npm)
18 compromised versions
Page 149 of 5,125