Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Oct 2, 2026
Malicious code in @erlanzz/baileys (npm)
1 compromised version
- Oct 2, 2026
Malicious code in ichigo-baileys (npm)
1 compromised version
- Oct 2, 2026
Malicious code in @developmentyora/baileyss (npm)
1 compromised version
- Oct 2, 2026
Malicious code in @fazzcodestudio/wa-web (npm)
1 compromised version
- Oct 2, 2026
Malicious code in kartykgithub-ph-f (npm)
1 compromised version
- Oct 2, 2026
Malware in kartykgithub-ph-f
1 compromised version
- Oct 2, 2026
Malicious code in kartykgithub-ph-e (npm)
1 compromised version
- Oct 2, 2026
Malware in kartykgithub-ph-e
1 compromised version
- Oct 2, 2026
Malicious code in kartykgithub-ph-b (npm)
3 compromised versions
- Oct 2, 2026
Malware in kartykgithub-ph-b
1 compromised version
- Oct 2, 2026
Malicious code in shortneer (PyPI)
1 compromised version
- Oct 2, 2026
Malicious code in gogets.dev/btreex (Go)
- Oct 2, 2026
Malicious code in gocommunity.io/orderedbtree (Go)
- Oct 1, 2026
Malicious code in wailib (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mikuhostt-baileys (npm)
3 compromised versions
- Oct 1, 2026
Malicious code in danz-bails (npm)
2 compromised versions
- Oct 1, 2026
Malicious code in @erlanzz/baileys (npm)
1 compromised version
- Oct 1, 2026
Malicious code in illusion-datalab (npm)
5 compromised versions
- Oct 1, 2026
Malware in illusion-datalab
1 compromised version
- Oct 1, 2026
Malware in homestack-cheer
1 compromised version
- Oct 1, 2026
Malicious code in spo365-graph (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in shortneer (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in spo365-graph (PyPI)
4 compromised versions
- Oct 1, 2026
Malicious code in @kelvdra/baileys (npm)
8 compromised versions
- Oct 1, 2026
Malicious code in @bottino/baileys (npm)
13 compromised versions
- Oct 1, 2026
Malicious code in online-header (npm)
1 compromised version
- Oct 1, 2026
Malicious code in friendly-tools (PyPI)
1 compromised version
- Oct 1, 2026
Malicious code in online-header (npm)
1 compromised version
- Oct 1, 2026
Malicious code in friendly-tools (PyPI)
2 compromised versions
- Oct 1, 2026
Malicious code in future-scripts (npm)
1 compromised version
- Oct 1, 2026
Malware in my-ctf-helper-script-9921
1 compromised version
- Oct 1, 2026
Malware in pf23727
1 compromised version
- Oct 1, 2026
Malware in pf25262
1 compromised version
- Oct 1, 2026
Malware in pflag14570
1 compromised version
- Oct 1, 2026
Malware in pulse-pwn-9f3a2
1 compromised version
- Oct 1, 2026
Malware in pflag29424
1 compromised version
- Oct 1, 2026
Malware in pf25133
1 compromised version
- Oct 1, 2026
Malicious code in set-egs-backend (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-ref-dedserver (npm)
1 compromised version
- Oct 1, 2026
Malicious code in store-service-worker (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-ref-client (npm)
1 compromised version
- Oct 1, 2026
Malicious code in qa-egs-rollback (npm)
1 compromised version
- Oct 1, 2026
Malicious code in generator-epic-react (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mod-manager (npm)
1 compromised version
- Oct 1, 2026
Malicious code in ssp-config-management-tool (npm)
1 compromised version
- Oct 1, 2026
Malicious code in player-support-tools-ui (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-simulation (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-service (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-tools (npm)
1 compromised version
- Oct 1, 2026
Malicious code in mms-thin-client (npm)
1 compromised version
Page 60 of 7,312