Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,540 total · sorted newest first- Nov 6, 2026
Malicious code in wisdomtreetest (npm)
- Nov 6, 2026
Malware in wisdomtreetest
1 compromised version
- Nov 6, 2026
Malicious code in @ts-expect-error/n (npm)
- Nov 6, 2026
Malicious code in @site-cms/ssr (npm)
- Nov 6, 2026
Malicious code in @sideeffects/n (npm)
- Nov 6, 2026
Malicious code in @noinheritdoc/n (npm)
- Nov 6, 2026
Malware in @site-cms/ssr
1 compromised version
- Nov 6, 2026
Malware in @ts-expect-error/n
1 compromised version
- Nov 6, 2026
Malware in @noinheritdoc/n
1 compromised version
- Nov 6, 2026
Malware in @sideeffects/n
1 compromised version
- Nov 6, 2026
Malicious code in @needsaudit/nexport (npm)
- Nov 6, 2026
Malicious code in @needsaudit/n (npm)
- Nov 6, 2026
Malware in @needsaudit/nexport
1 compromised version
- Nov 6, 2026
Malware in @needsaudit/n
1 compromised version
- Nov 6, 2026
Malicious code in @smart-dev-wa/baileys (npm)
1 compromised version
- Nov 6, 2026
Malware in @smart-dev-wa/baileys
1 compromised version
- Nov 6, 2026
Malicious code in zero2-baileys (npm)
- Nov 6, 2026
Malware in zero2-baileys
1 compromised version
- Nov 6, 2026
Malicious code in securedrop-app (npm)
- Nov 6, 2026
Malicious code in kc-kline-chart (npm)
- Nov 6, 2026
Malicious code in evmos-contracts (npm)
- Nov 6, 2026
Malicious code in arc-contracts (npm)
- Nov 6, 2026
Malware in arc-contracts
1 compromised version
- Nov 6, 2026
Malware in securedrop-app
1 compromised version
- Nov 6, 2026
Malware in kc-kline-chart
1 compromised version
- Nov 6, 2026
Malware in ccb-app-ui-service
1 compromised version
- Nov 6, 2026
Malware in evmos-contracts
1 compromised version
- Nov 6, 2026
Malicious code in @kora20030101/test-pkg-delete-me (npm)
- Nov 6, 2026
Malware in vfat-tools
1 compromised version
- Nov 6, 2026
Malware in @kora20030101/test-pkg-delete-me
1 compromised version
- Nov 6, 2026
Malware in sickle-wrapper
1 compromised version
- Nov 6, 2026
Malicious code in @exclipz/bails (npm)
- Nov 6, 2026
Malicious code in @exclipz/baileys (npm)
- Nov 6, 2026
Malware in @exclipz/bails
1 compromised version
- Nov 6, 2026
Malware in @exclipz/baileys
1 compromised version
- Nov 6, 2026
Malicious code in oktz-baileys (npm)
1 compromised version
- Nov 6, 2026
Malicious code in @nuri.yavuz.tr.2/my-unique-pinger (npm)
1 compromised version
- Nov 6, 2026
Malicious code in rafael-bails (npm)
1 compromised version
- Nov 6, 2026
Malicious code in nishiki-bail (npm)
1 compromised version
- Nov 6, 2026
Malicious code in kurobails (npm)
1 compromised version
- Nov 5, 2026
Malware in itc-actors-api
1 compromised version
- Nov 5, 2026
Malicious code in talk-lang (npm)
- Nov 5, 2026
Malicious code in plain-lang (npm)
- Nov 5, 2026
Malware in talk-lang
1 compromised version
- Nov 5, 2026
Malware in plain-lang
1 compromised version
- Nov 5, 2026
Malicious code in test1817 (npm)
- Nov 5, 2026
Malware in test1817
1 compromised version
- Nov 5, 2026
Malware in @db-tools/main-app
1 compromised version
- Nov 5, 2026
Malicious code in @gemshell/win32-x64 (npm)
1 compromised version
- Nov 5, 2026
Malware in @gemshell/win32-x64
1 compromised version
Page 2 of 7,311