Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,540 total · sorted newest first- Nov 5, 2026
Malicious code in @bellaxchan/bailtech (npm)
1 compromised version
- Nov 5, 2026
Malicious code in ichigokurosaki-baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in @monze1239/baileys (npm)
1 compromised version
- Nov 5, 2026
Malicious code in loader-utils-kit (npm)
1 compromised version
- Nov 5, 2026
Malicious code in synapse-hub (npm)
4 compromised versions
- Nov 5, 2026
Malware in synapse-hub
1 compromised version
- Nov 5, 2026
Malicious code in rcp-ndcg (PyPI)
1 compromised version
- Nov 5, 2026
Malicious code in strands-aidr (PyPI)
1 compromised version
- Nov 5, 2026
Malicious code in strands-aidr (PyPI)
1 compromised version
- Nov 4, 2026
Malicious code in @secauditb20y/sec-test-b1 (npm)
- Nov 4, 2026
Malware in @secauditb20y/sec-test-b1
1 compromised version
- Nov 4, 2026
Malicious code in @secaudita10x/sec-test-a1 (npm)
- Nov 4, 2026
Malware in @secaudita10x/sec-test-a1
1 compromised version
- Nov 4, 2026
Malware in @secauditb20y/sec-test-r3b
1 compromised version
- Nov 4, 2026
Malware in exnesss
1 compromised version
- Nov 4, 2026
Malicious code in thththtbhthhth (npm)
- Nov 4, 2026
Malicious code in nannnnnnnnn (npm)
- Nov 4, 2026
Malicious code in heheheshsds (npm)
- Nov 4, 2026
Malicious code in dogmans-afterglow (npm)
- Nov 4, 2026
Malicious code in doghack-afterglow (npm)
- Nov 4, 2026
Malicious code in @saidddddddddd/ggsgg (npm)
- Nov 4, 2026
Malware in @saidddddddddd/ggsgg
1 compromised version
- Nov 4, 2026
Malware in heheheshsds
1 compromised version
- Nov 4, 2026
Malware in @saidddddddddd/somethingelse
1 compromised version
- Nov 4, 2026
Malware in nannnnnnnnn
1 compromised version
- Nov 4, 2026
Malware in dogmans-afterglow
1 compromised version
- Nov 4, 2026
Malware in thththtbhthhth
1 compromised version
- Nov 4, 2026
Malware in doghack-afterglow
1 compromised version
- Nov 4, 2026
Malicious code in nminer (npm)
1 compromised version
- Nov 4, 2026
Malware in nminer
1 compromised version
- Nov 4, 2026
Malicious code in @pubngo-stack/help-browser (npm)
1 compromised version
- Nov 4, 2026
Malware in @pubngo-stack/help-browser
1 compromised version
- Nov 4, 2026
Malicious code in @cdmbase/wiki-browser (npm)
1 compromised version
- Nov 4, 2026
Malware in @cdmbase/wiki-browser
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/yantra-help-browser (npm)
1 compromised version
- Nov 4, 2026
Malware in @adminide-stack/yantra-help-browser
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/forms-core (npm)
1 compromised version
- Nov 4, 2026
Malware in @adminide-stack/forms-core
1 compromised version
- Nov 4, 2026
Malicious code in cdeops (npm)
1 compromised version
- Nov 4, 2026
Malware in cdeops
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/user-activity-browser (npm)
2 compromised versions
- Nov 4, 2026
Malware in @adminide-stack/user-activity-browser
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/health-api-server (npm)
1 compromised version
- Nov 4, 2026
Malware in @adminide-stack/health-api-server
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/client-redux (npm)
1 compromised version
- Nov 4, 2026
Malware in @adminide-stack/client-redux
1 compromised version
- Nov 4, 2026
Malicious code in @adminide-stack/utils (npm)
1 compromised version
- Nov 4, 2026
Malware in @adminide-stack/utils
1 compromised version
- Nov 4, 2026
Malicious code in extera-plugin-runtime (PyPI)
1 compromised version
- Nov 4, 2026
Malicious code in msgpackrpc (PyPI)
1 compromised version
Page 4 of 7,311