Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 25, 2026
Malicious code in @digift/cli (npm)
1 compromised version
- Sep 25, 2026
Malicious code in @nubjs/types (npm)
1 compromised version
- Sep 25, 2026
Malware in @nubjs/types
1 compromised version
- Sep 25, 2026
Malicious code in @zeronexcode/baileys (npm)
1 compromised version
- Sep 25, 2026
Malicious code in shoplist-app (npm)
1 compromised version
- Sep 25, 2026
Malicious code in @airbnb-extended/typescript-config (npm)
1 compromised version
- Sep 25, 2026
Malicious code in @airbnb-extended/typescript-config (npm)
1 compromised version
- Sep 25, 2026
Malicious code in shoplist-app (npm)
2 compromised versions
- Sep 25, 2026
Malicious code in tego-managed-agents-test (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in tego-managed-agents-test (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in app-sca-info-banking (npm)
1 compromised version
- Sep 25, 2026
Malicious code in reqparser (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in app-sca-info-banking (npm)
1 compromised version
- Sep 25, 2026
Malicious code in reqparser (PyPI)
2 compromised versions
- Sep 25, 2026
Malicious code in secure-env3 (npm)
1 compromised version
- Sep 25, 2026
Malicious code in wallet-connect-adapter (npm)
1 compromised version
- Sep 25, 2026
Malicious code in n8n-nodes-flowstats (npm)
1 compromised version
- Sep 25, 2026
Malicious code in my-private-pkg (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in better-dotenv3 (npm)
1 compromised version
- Sep 25, 2026
Malicious code in agency-test-exercise (npm)
1 compromised version
- Sep 25, 2026
Malicious code in n8n-nodes-moonlet-helpers (npm)
1 compromised version
- Sep 25, 2026
Malicious code in n8n-nodes-moonlet-utils (npm)
1 compromised version
- Sep 25, 2026
Malicious code in chromatitle-js (npm)
1 compromised version
- Sep 25, 2026
Malicious code in chromatitle (npm)
1 compromised version
- Sep 25, 2026
Malicious code in agency-testts (npm)
1 compromised version
- Sep 25, 2026
Malicious code in @alphaspace/core (npm)
1 compromised version
- Sep 25, 2026
Malicious code in @alphaspace/core (npm)
4 compromised versions
- Sep 25, 2026
Malicious code in n8n-nodes-moonlet-helpers (npm)
2 compromised versions
- Sep 25, 2026
Malicious code in n8n-nodes-moonlet-utils (npm)
1 compromised version
- Sep 25, 2026
Malicious code in n8n-nodes-flowstats (npm)
1 compromised version
- Sep 25, 2026
Malicious code in wallet-connect-adapter (npm)
1 compromised version
- Sep 25, 2026
Malicious code in agency-testts (npm)
1 compromised version
- Sep 25, 2026
Malicious code in secure-env3 (npm)
1 compromised version
- Sep 25, 2026
Malicious code in agency-test-exercise (npm)
1 compromised version
- Sep 25, 2026
Malicious code in better-dotenv3 (npm)
1 compromised version
- Sep 25, 2026
Malicious code in chromatitle-js (npm)
1 compromised version
- Sep 25, 2026
Malicious code in chromatitle (npm)
1 compromised version
- Sep 25, 2026
Malicious code in vercel-runtime-python (PyPI)
1 compromised version
- Sep 25, 2026
Malicious code in my-private-pkg (PyPI)
3 compromised versions
- Sep 24, 2026
Malicious code in vercel-runtime-python (PyPI)
4 compromised versions
- Sep 24, 2026
Malicious code in prosocks (PyPI)
1 compromised version
- Sep 24, 2026
Malicious code in prosocks (PyPI)
28 compromised versions
- Sep 24, 2026
Malware in ubiquiti-agents-link-mcp
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-15 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @osl-design/react (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @nf-addons/am-global-header (npm)
1 compromised version
- Sep 24, 2026
Malicious code in eslint-config-compact-base (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-14 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in aliftech-ui (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-13 (npm)
1 compromised version
Page 70 of 7,312