Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,530 total · sorted newest first- Oct 26, 2026
Malicious code in @axo_cuy/baileyss (npm)
3 compromised versions
- Oct 26, 2026
Malicious code in @alannxds/baileys (npm)
1 compromised version
- Oct 26, 2026
Malicious code in canta-baileys (npm)
1 compromised version
- Oct 26, 2026
Malicious code in birch-css-utils (npm)
5 compromised versions
- Oct 25, 2026
Malicious code in claudeopuseni (PyPI)
2 compromised versions
- Oct 25, 2026
Malicious code in claudeopusenifile (PyPI)
1 compromised version
- Oct 25, 2026
Malicious code in claudeopusfile (PyPI)
2 compromised versions
- Oct 25, 2026
Malicious code in nebulallm (PyPI)
1 compromised version
- Oct 25, 2026
Malicious code in @capsense/core-ui (npm)
1 compromised version
- Oct 25, 2026
Malicious code in zagents-message-bus (PyPI)
1 compromised version
- Oct 25, 2026
Malicious code in nebulallm (PyPI)
1 compromised version
- Oct 25, 2026
Malicious code in zagents-message-bus (PyPI)
4 compromised versions
- Oct 25, 2026
Malicious code in @capsense/ccx-welcome-page (npm)
1 compromised version
- Oct 25, 2026
Malicious code in event-bus-lite-testmetest (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @capsense/ccx-welcome-page (npm)
3 compromised versions
- Oct 25, 2026
Malicious code in @capsense/core-ui (npm)
3 compromised versions
- Oct 25, 2026
Malicious code in event-bus-lite-testmetest (npm)
1 compromised version
- Oct 25, 2026
Malicious code in w-mousekey (npm)
2 compromised versions
- Oct 25, 2026
Malware in w-mousekey
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-headerfooter (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-hotel-collection (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-searchform (npm)
1 compromised version
- Oct 25, 2026
Malicious code in paychex-pdftron (npm)
1 compromised version
- Oct 25, 2026
Malicious code in sc-hydrate-carousel-price (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-builder (npm)
1 compromised version
- Oct 25, 2026
Malicious code in react-native-bright-sdk (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-navigation (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-banner (npm)
1 compromised version
- Oct 25, 2026
Malicious code in jshelperdependenceny (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @jm-telefonica/multibrand-components (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @fmr-ap153177/apex-kit-icons (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @greenlake/session (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @greenlake/common-context (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @postex/common (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @factoryz/apollo (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @futurae-public/adaptive-js (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @generic-means/ing-feat-scanner-libs (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @drone-js-ext/vip-badge (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @drone-js-ext/core (npm)
1 compromised version
- Oct 25, 2026
Malicious code in jshelperdependenceny (npm)
3 compromised versions
- Oct 25, 2026
Malicious code in @fmr-ap153177/apex-kit-icons (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @generic-means/ing-feat-scanner-libs (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @factoryz/apollo (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @jm-telefonica/multibrand-components (npm)
1 compromised version
- Oct 25, 2026
Malicious code in @postex/common (npm)
1 compromised version
- Oct 25, 2026
Malicious code in sc-hydrate-carousel-price (npm)
2 compromised versions
- Oct 25, 2026
Malicious code in @futurae-public/adaptive-js (npm)
1 compromised version
- Oct 25, 2026
Malicious code in paychex-pdftron (npm)
2 compromised versions
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-headerfooter (npm)
9 compromised versions
- Oct 25, 2026
Malicious code in @ppa-web-components/ppa-hotel-collection (npm)
7 compromised versions
Page 21 of 7,311