Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,987 total · sorted newest first- Jun 24, 2026
Malicious code in llm-traces-app (npm)
1 compromised version
- Jun 24, 2026
Malicious code in twilio-voice-js-reference-components (npm)
1 compromised version
- Jun 24, 2026
Malicious code in openllmapi (npm)
1 compromised version
- Jun 24, 2026
Malicious code in monty-data (npm)
3 compromised versions
- Jun 24, 2026
Malicious code in npmkekw (npm)
4 compromised versions
- Jun 24, 2026
Malicious code in tailwind-textform-fill (npm)
- Jun 24, 2026
Malicious code in html-to-gutenberg (npm)
1 compromised version
- Jun 24, 2026
Malicious code in fetch-page-assets (npm)
1 compromised version
- Jun 24, 2026
Malicious code in vscode-test-web (npm)
1 compromised version
- Jun 23, 2026
Malicious code in delta-time-32bb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in npm-bug-bounty-test1-rhyselsmore (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ppt-creator (npm)
1 compromised version
- Jun 23, 2026
Malicious code in bug-monorepo (npm)
1 compromised version
- Jun 23, 2026
Malicious code in theme-color-picker (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in chai-as-operated (npm)
1 compromised version
- Jun 23, 2026
Malicious code in markdownlint-cli2-fix (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in buffer-wrap-67d7 (npm)
1 compromised version
- Jun 23, 2026
Malicious code in hex-conv-ae7a (npm)
1 compromised version
- Jun 23, 2026
Malicious code in safe-json-38bd (npm)
1 compromised version
- Jun 23, 2026
Malicious code in wagmi_util (npm)
1 compromised version
- Jun 23, 2026
Malicious code in log-taker (npm)
1 compromised version
- Jun 23, 2026
Malicious code in react-check-error (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in triage-bot (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in therdweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thidweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thurdweb (npm)
1 compromised version
- Jun 23, 2026
Malicious code in rainbownkit (npm)
1 compromised version
- Jun 23, 2026
Malicious code in thirdwebjs (npm)
1 compromised version
- Jun 23, 2026
Malicious code in rainbokit (npm)
1 compromised version
- Jun 23, 2026
Malicious code in hunsterx-package (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @zynkit/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @frostnode/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @gleamkit/probe (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-grok (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-escrow (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-bn-lint-helper (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-bn-lint (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in ts-escro (npm)
2 compromised versions
- Jun 23, 2026
Malicious code in @muaththir/api (npm)
1 compromised version
- Jun 23, 2026
Malicious code in ts-biginteger-lib (npm)
1 compromised version
- Jun 23, 2026
Malicious code in cursorai-agent (npm)
1 compromised version
- Jun 23, 2026
Malicious code in @ravespaceio/rave-engine (npm)
- Jun 23, 2026
Malicious code in @ravespaceio/browser-input (npm)
- Jun 23, 2026
Malicious code in web3-crypto-address-utils (npm)
1 compromised version
- Jun 23, 2026
Malicious code in web3-eth-util (npm)
1 compromised version
- Jun 23, 2026
Malicious code in web3-eth-utils (npm)
1 compromised version
- Jun 23, 2026
Malicious code in calculate-helper (npm)
- Jun 23, 2026
Malicious code in security-alerts-sdk (PyPI)
4 compromised versions
- Jun 23, 2026
Malicious code in sync-external (npm)
3 compromised versions
- Jun 23, 2026
Malicious code in server-parket (npm)
5 compromised versions
Page 90 of 5,120