Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
256,236 total · sorted newest first- May 20, 2026
Malicious code in supership-scan (npm)
1 compromised version
- May 20, 2026
Malicious code in create-kachow (npm)
1 compromised version
- May 20, 2026
Malicious code in chain-async-test (npm)
1 compromised version
- May 20, 2026
Malicious code in vite-json-config (npm)
1 compromised version
- May 20, 2026
Malicious code in @signetai/signet-memory-openclaw (npm)
2 compromised versions
- May 20, 2026
Malicious code in @link-assistant/hive-mind (npm)
6 compromised versions
- May 20, 2026
Malicious code in @elvatis_com/openclaw-cli-bridge-elvatis (npm)
1 compromised version
- May 20, 2026
Malicious code in @ctrl/plex (npm)
1 compromised version
- May 20, 2026
Malicious code in @tailwind-core/oxide-linux-x64-gnu (npm)
1 compromised version
- May 20, 2026
Malicious code in @aswinsparky/api (npm)
1 compromised version
- May 20, 2026
Malicious code in instal (PyPI)
1 compromised version
- May 20, 2026
Malicious code in bolt-delivery-menu-app (npm)
1 compromised version
- May 20, 2026
Malicious code in @saidddddddddd/somethingelse (npm)
1 compromised version
- May 20, 2026
Malware in @antv/li-sam-assets
1 compromised version
- May 20, 2026
Malicious code in @aledan007/tester (npm)
1 compromised version
- May 20, 2026
Malicious code in @vivaux/telemetry (npm)
1 compromised version
- May 20, 2026
Malicious code in cb-wallet-http (npm)
1 compromised version
- May 20, 2026
Malware in @antv/a8
1 compromised version
- May 20, 2026
Malware in @antv/adjust
1 compromised version
- May 20, 2026
Malicious code in ethers-wallet-package (npm)
1 compromised version
- May 20, 2026
Malicious code in private-next-pages (npm)
1 compromised version
- May 20, 2026
Malicious code in @self-evolving-harness/kivo (npm)
1 compromised version
- May 20, 2026
Malicious code in txdpy (PyPI)
1 compromised version
- May 20, 2026
Malicious code in strawberry-graphql (PyPI)
1 compromised version
- May 20, 2026
Malicious code in vlifegram (PyPI)
1 compromised version
- May 20, 2026
Malicious code in iv-stubborn (npm)
1 compromised version
- May 20, 2026
Malicious code in iv-bloomfilter (npm)
- May 20, 2026
Malicious code in @doctolib-apps/native-personalized-services (npm)
3 compromised versions
- May 20, 2026
Malware in iv-bloomfilter
1 compromised version
- May 20, 2026
Malware in @doctolib-apps/native-personalized-services
1 compromised version
- May 20, 2026
Malware in iv-stubborn
1 compromised version
- May 20, 2026
Malware in @limebike/supreme
1 compromised version
- May 20, 2026
Malware in @limebike/supreme-date-pickers
1 compromised version
- May 20, 2026
Malware in @limebike/frontend-core-api
1 compromised version
- May 20, 2026
Malware in @limebike/supreme-data-grid
1 compromised version
- May 20, 2026
Malicious code in uolcs-host-uol-anuncios-fe (npm)
1 compromised version
- May 20, 2026
Malicious code in @nutui/nutui-react-taro (npm)
1 compromised version
- May 20, 2026
Malicious code in stripe-internal-utils (npm)
1 compromised version
- May 20, 2026
Malicious code in @limebike/frontend-core-api (npm)
1 compromised version
- May 20, 2026
Malicious code in @budetzz/baileys (npm)
4 compromised versions
- May 20, 2026
Malicious code in @bcrumbs.net/bc-chat (npm)
1 compromised version
- May 20, 2026
Malicious code in mamadoos-test (npm)
3 compromised versions
- May 20, 2026
Malicious code in randomlogs (npm)
3 compromised versions
- May 20, 2026
Malicious code in @limebike/supreme-data-grid (npm)
3 compromised versions
- May 20, 2026
Malicious code in gator-client (npm)
1 compromised version
- May 20, 2026
Malicious code in rendezvous-js (npm)
1 compromised version
- May 20, 2026
Malicious code in banana-stand (npm)
1 compromised version
- May 20, 2026
Malicious code in @limebike/supreme-date-pickers (npm)
2 compromised versions
- May 20, 2026
Malicious code in @kmmao/happy-coder (npm)
9 compromised versions
- May 20, 2026
Malicious code in lynx-keeper (npm)
3 compromised versions
Page 151 of 5,125