Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 24, 2026
Malicious code in @birbalo/aliftech-ui (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-11 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in analytics-widget (npm)
1 compromised version
- Sep 24, 2026
Malicious code in building-build (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-16 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in c2-client (npm)
1 compromised version
- Sep 24, 2026
Malicious code in cache-swipper (npm)
1 compromised version
- Sep 24, 2026
Malicious code in analytics-widget (npm)
2 compromised versions
- Sep 24, 2026
Malicious code in building-build (npm)
1 compromised version
- Sep 24, 2026
Malicious code in cache-swipper (npm)
2 compromised versions
- Sep 24, 2026
Malicious code in c2-client (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-16 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in eslint-config-compact-base (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-14 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-13 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in aliftech-ui (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @osl-design/react (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-15 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in simple-date-formatter-new-11 (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @nf-addons/am-global-header (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @birbalo/aliftech-ui (npm)
1 compromised version
- Sep 24, 2026
Malicious code in @baanx/domain (npm)
1 compromised version
- Sep 24, 2026
Malware in @insiderintelligence/componentlibrary
1 compromised version
- Sep 24, 2026
Malware in @baanx/domain
1 compromised version
- Sep 24, 2026
Malware in @insiderintelligence/googleadmanager
1 compromised version
- Sep 24, 2026
Malware in @baanx/solana-lib
1 compromised version
- Sep 24, 2026
Malicious code in @baanx/common (npm)
1 compromised version
- Sep 24, 2026
Malware in @baanx/blockchain-config
1 compromised version
- Sep 24, 2026
Malware in @baanx/abis
1 compromised version
- Sep 24, 2026
Malware in @baanx/common
1 compromised version
- Sep 24, 2026
Malicious code in @rixxcodex/baileys (npm)
1 compromised version
- Sep 24, 2026
Malicious code in pino-testkit (npm)
1 compromised version
- Sep 23, 2026
Malicious code in @rixxcodex/baileys (npm)
4 compromised versions
- Sep 23, 2026
Malicious code in pino-testkit (npm)
1 compromised version
- Sep 23, 2026
Malicious code in internallib_v657 (npm)
1 compromised version
- Sep 23, 2026
Malicious code in internallib_v463 (npm)
1 compromised version
- Sep 23, 2026
Malicious code in a-onesite (npm)
1 compromised version
- Sep 23, 2026
Malware in internallib_v497
1 compromised version
- Sep 23, 2026
MemoryOS 2.0.34 was published with a credential-stealing binary
1 compromised version
- Sep 23, 2026
Malicious code in internallib_v657 (npm)
1 compromised version
- Sep 23, 2026
Malicious code in internallib_v463 (npm)
1 compromised version
- Sep 23, 2026
Malicious code in a-onesite (npm)
1 compromised version
- Sep 23, 2026
Malicious code in event-hunter (npm)
1 compromised version
- Sep 23, 2026
Malicious code in simplenewnpmpackage (npm)
1 compromised version
- Sep 23, 2026
Malicious code in com.apple.unityplugin.storekit (npm)
1 compromised version
- Sep 23, 2026
Malicious code in event-hunter (npm)
1 compromised version
- Sep 23, 2026
Malicious code in simplenewnpmpackage (npm)
1 compromised version
- Sep 23, 2026
Malicious code in com.apple.unityplugin.storekit (npm)
2 compromised versions
- Sep 23, 2026
Malicious code in memoryos (PyPI)
1 compromised version
- Sep 23, 2026
Malware in @memtensor/memos-cloud-openclaw-plugin
1 compromised version
Page 71 of 7,312