Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 28, 2026
Malicious code in simple-date-formatter-new-12 (npm)
1 compromised version
- Sep 28, 2026
Malicious code in nebula-llm (npm)
1 compromised version
- Sep 28, 2026
Malicious code in nebulaai-sdk (npm)
1 compromised version
- Sep 28, 2026
Malicious code in fabric-render-bridge (npm)
1 compromised version
- Sep 28, 2026
Malicious code in figlet-chalk-render (npm)
1 compromised version
- Sep 28, 2026
Malicious code in chalk-figlet (npm)
1 compromised version
- Sep 28, 2026
Malicious code in fabric-asset-pipeline (npm)
1 compromised version
- Sep 28, 2026
Malicious code in simple-date-formatter-new-12 (npm)
1 compromised version
- Sep 28, 2026
Malicious code in nebulaai-sdk (npm)
1 compromised version
- Sep 28, 2026
Malicious code in figlet-chalk-render (npm)
2 compromised versions
- Sep 28, 2026
Malicious code in chalk-figlet (npm)
1 compromised version
- Sep 28, 2026
Malicious code in nebula-llm (npm)
1 compromised version
- Sep 28, 2026
Malicious code in fabric-render-bridge (npm)
1 compromised version
- Sep 28, 2026
Malicious code in fabric-asset-pipeline (npm)
2 compromised versions
- Sep 28, 2026
Malware in @digift/cli
1 compromised version
- Sep 28, 2026
Malicious code in img-to-native (npm)
4 compromised versions
- Sep 28, 2026
Malware in img-to-native
1 compromised version
- Sep 28, 2026
Malicious code in native-runner (npm)
4 compromised versions
- Sep 28, 2026
Malware in native-runner
1 compromised version
- Sep 28, 2026
Malicious code in nebulajs-api (npm)
1 compromised version
- Sep 28, 2026
Malicious code in nebula-sdk (npm)
2 compromised versions
- Sep 28, 2026
Malware in nebula-sdk
1 compromised version
- Sep 28, 2026
Malware in nebulajs-api
1 compromised version
- Sep 28, 2026
Malicious code in vite-plugin-crypto (npm)
5 compromised versions
- Sep 28, 2026
Malware in vite-plugin-crypto
1 compromised version
- Sep 28, 2026
Malware in hardhat-cap
1 compromised version
- Sep 28, 2026
Malicious code in tailwindcss-form-kit (npm)
3 compromised versions
- Sep 28, 2026
Malware in tailwindcss-form-kit
1 compromised version
- Sep 28, 2026
Malicious code in my-skibidi (npm)
9 compromised versions
- Sep 28, 2026
Malware in my-skibidi
1 compromised version
- Sep 28, 2026
Malware in chaikit
1 compromised version
- Sep 28, 2026
Malicious code in git-en-boite-logging (npm)
1 compromised version
- Sep 28, 2026
Malicious code in eslint-plugin-skywagon-web (npm)
1 compromised version
- Sep 28, 2026
Malicious code in eslint-plugin-skywagon-web (npm)
1 compromised version
- Sep 28, 2026
Malicious code in git-en-boite-logging (npm)
1 compromised version
- Sep 28, 2026
Malicious code in godsplan (npm)
1 compromised version
- Sep 28, 2026
Malicious code in azure-langchain-example (PyPI)
1 compromised version
- Sep 28, 2026
Malicious code in azure-langchain-example (PyPI)
1 compromised version
- Sep 28, 2026
Malicious code in wbnr-probe-visible-check (npm)
1 compromised version
- Sep 28, 2026
Malicious code in @wbnr/lottiefiles-loader (npm)
- Sep 28, 2026
Malicious code in @wbnr/design-kit (npm)
- Sep 28, 2026
Malware in @wbnr/lottiefiles-loader
1 compromised version
- Sep 28, 2026
Malware in @wbnr/design-kit
1 compromised version
- Sep 28, 2026
Malware in wbnr-probe-visible-check
1 compromised version
- Sep 28, 2026
Malicious code in kalasnik-npm-simple-test (npm)
1 compromised version
- Sep 28, 2026
Malware in kalasnik-npm-simple-test
1 compromised version
- Sep 28, 2026
Malicious code in kjj81 (npm)
1 compromised version
- Sep 28, 2026
Malware in kjj81
1 compromised version
- Sep 28, 2026
Malware in o0o9
1 compromised version
- Sep 28, 2026
Malicious code in uuid-date (npm)
Page 68 of 7,312