Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,493 total · sorted newest first- Sep 30, 2026
Malicious code in focashi (npm)
1 compromised version
- Sep 30, 2026
Malicious code in shadowmd (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @xayz/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in yonzofficial (npm)
1 compromised version
- Sep 30, 2026
Malicious code in xzvbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @sairidev/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in cantarella-baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in bungoma (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @ostyado/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @queenanya/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @nyzzpediaa/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @saazkira/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @nyzzpedia/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @lendxntaa/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @lendkzn/xntaabail (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @mikudeveloper/grace (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @mivesensei/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in anuaja (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @noxleyss/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @xatancchii/velycxbail (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @revizahoshii/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @wanzlonely/bails4u (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @sakataoffc/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @rennnpm/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in baileys-xbats (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @levvicode/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @teamolduser/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @revizahoshii/hoshino (npm)
1 compromised version
- Sep 30, 2026
Malicious code in arsya-baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @wenzyx1/bails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in albert-anitabaileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @japofc/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @fhkryxv/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @ikanngeming/ikannbail (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @kelvdra/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @hanzofc/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @kanaraa/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @kxa/xbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @ikyyjee/ikyysinggle (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bottino/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @jojoxyz/condemnedforce-baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @ikyyjee/ikkysingle (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @ikyyjee/ikyysingle (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @fhkryxv/baileys-new (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @badzz88/baileys (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/skyblue (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/crystalred (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/velvetry (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/belbails (npm)
1 compromised version
- Sep 30, 2026
Malicious code in @bellaxchuu/familyxtrx (npm)
1 compromised version
Page 40 of 7,290