Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,350 total · sorted newest first- Sep 30, 2026
Malicious code in @fhkryxv/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @badzz88/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/skyblue (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/crystalred (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/velvetry (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/belbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/familyxtrx (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @astracode/byles-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in reactjs-risk (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/flowblue (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/privatebails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/xtrxbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/teambails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in beautifytext (PyPI)
3 compromised versions
- Sep 30, 2026
Malicious code in yonzofficial (npm)
4 compromised versions
- Sep 30, 2026
Malicious code in xzvbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in xvinleys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in whalibmob (npm)
20 compromised versions
- Sep 30, 2026
Malicious code in syncxbails (npm)
2 compromised versions
- Sep 30, 2026
Malicious code in spencer-baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in noxxleys (npm)
7 compromised versions
- Sep 30, 2026
Malicious code in noxleyss (npm)
11 compromised versions
- Sep 30, 2026
Malicious code in noverojs (npm)
2 compromised versions
- Sep 30, 2026
Malicious code in monte-md-baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in lilys-baileys (npm)
2 compromised versions
- Sep 30, 2026
Malicious code in levvleys (npm)
20 compromised versions
- Sep 30, 2026
Malicious code in keithbaileys (npm)
3 compromised versions
- Sep 30, 2026
Malicious code in kasabaileys (npm)
4 compromised versions
- Sep 30, 2026
Malicious code in ishumdz-bail (npm)
14 compromised versions
- Sep 30, 2026
Malicious code in focashi (npm)
1 compromised version
- Sep 30, 2026
Malicious code in eliteprotech-baileys (npm)
3 compromised versions
- Sep 30, 2026
Malicious code in anuaja (npm)
3 compromised versions
- Sep 30, 2026
Malicious code in @teamolduser/baileys (npm)
3 compromised versions
- Sep 30, 2026
Malicious code in @rennnpm/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @queenanya/baileys (npm)
3 compromised versions
- Sep 30, 2026
Malicious code in @nyzzpedia/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @noxleyss/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @levvicode/baileys (npm)
2 compromised versions
- Sep 30, 2026
Malicious code in @lendkzn/xntaabail (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @japofc/baileys (npm)
7 compromised versions
- Sep 30, 2026
Malicious code in @hanzofc/baileys (npm)
2 compromised versions
- Sep 30, 2026
Malicious code in reactjs-risk (npm)
6 compromised versions
- Sep 30, 2026
Malicious code in niksinnkatalapp (npm)
1 compromised version
- Sep 30, 2026
Malicious code in live-detection-dashboard (npm)
1 compromised version
- Sep 30, 2026
Malicious code in figma-to-apl (npm)
1 compromised version
- Sep 30, 2026
Malicious code in brioche-apl-dev-env (npm)
1 compromised version
- Sep 30, 2026
Malicious code in apl-rive-renderer (npm)
1 compromised version
- Sep 30, 2026
Malicious code in alexa-cybertron-team-code-review-agent (npm)
1 compromised version
- Sep 30, 2026
Malicious code in ai-workshop-radio-lambda (npm)
1 compromised version
- Sep 30, 2026
Malicious code in ai-workshop-radio-app (npm)
1 compromised version
Page 38 of 7,287