Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,781 total · sorted newest first- Jul 13, 2026
Malicious code in notifications-broadcast (npm)
1 compromised version
- Jul 13, 2026
Malicious code in portway (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sso-users-detection (npm)
1 compromised version
- Jul 13, 2026
Malicious code in path-addon-extend (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in cold-debug-elevator (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in supertokens-web (npm)
1 compromised version
- Jul 13, 2026
Malicious code in env-stream (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in express-request-engine (npm)
1 compromised version
- Jul 13, 2026
Malicious code in trinity-scheme (npm)
1 compromised version
- Jul 13, 2026
Malicious code in minigptcore (npm)
1 compromised version
- Jul 13, 2026
Malicious code in @torbeck/heap (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in eth-base (npm)
1 compromised version
- Jul 13, 2026
Malicious code in terminal-mascot (npm)
1 compromised version
- Jul 13, 2026
Malicious code in awesome-terminal (npm)
1 compromised version
- Jul 13, 2026
Malicious code in async-chain-dom (npm)
1 compromised version
- Jul 13, 2026
Malicious code in chain-js-utils (npm)
1 compromised version
- Jul 13, 2026
Malicious code in note-utilities (npm)
1 compromised version
- Jul 13, 2026
Malicious code in cookie-phase (npm)
1 compromised version
- Jul 13, 2026
Malicious code in cookie-sign (npm)
1 compromised version
- Jul 13, 2026
Malicious code in tipsen-last-pls (npm)
1 compromised version
- Jul 13, 2026
Malicious code in tipsen-poc-again (npm)
1 compromised version
- Jul 13, 2026
Malicious code in tipsen-last (npm)
1 compromised version
- Jul 13, 2026
Malicious code in another-poc-by-tipsen (npm)
1 compromised version
- Jul 13, 2026
Malicious code in testdonotredeemit (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in sixseven9 (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sixseven8 (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sixseven7 (npm)
1 compromised version
- Jul 13, 2026
Malicious code in sixseven10 (npm)
1 compromised version
- Jul 13, 2026
Malicious code in acidic (npm)
1 compromised version
- Jul 13, 2026
Malicious code in abuden28 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden230 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden229 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden228 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden227 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden226 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden225 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden224 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden223 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden222 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden220 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden219 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden217 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden216 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden215 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden214 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden213 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden212 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden211 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden210 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff9 (npm)
3 compromised versions
Page 4 of 5,116