Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 21, 2026
Malicious code in byted-commerce-materials (npm)
1 compromised version
- Sep 21, 2026
Malicious code in bulk-add-sdk (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @asenfotech/unplugin-element-plus (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @dbbhk/ui-components (npm)
1 compromised version
- Sep 21, 2026
Malicious code in better-envforge (npm)
1 compromised version
- Sep 21, 2026
Malicious code in starbucks-sdk (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @siriusbeyond/auth (npm)
1 compromised version
- Sep 21, 2026
Malicious code in rrs (PyPI)
1 compromised version
- Sep 21, 2026
Malicious code in action-slack-message-root (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @siriusbeyond/utils (npm)
1 compromised version
- Sep 21, 2026
Malicious code in rrs (PyPI)
20 compromised versions
- Sep 21, 2026
Malicious code in pf23727 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in pflag14570 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in pflag29424 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in pf25133 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in keroeltopgg (npm)
1 compromised version
- Sep 21, 2026
Malicious code in keroeltopkkk (npm)
1 compromised version
- Sep 21, 2026
Malicious code in keroeltopkk (npm)
1 compromised version
- Sep 21, 2026
Malicious code in my-cdn-script (npm)
1 compromised version
- Sep 21, 2026
Malicious code in pf25262 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in homestack-cheer (npm)
12 compromised versions
- Sep 21, 2026
Malicious code in @asenfotech/unplugin-element-plus (npm)
2 compromised versions
- Sep 21, 2026
Malicious code in feed-widget-helper (npm)
3 compromised versions
- Sep 21, 2026
Malicious code in element-plus-vite-cli (npm)
2 compromised versions
- Sep 21, 2026
Malicious code in catwrestlingbird (npm)
1 compromised version
- Sep 21, 2026
Malicious code in sorrawit-dev-helper (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1gg234 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in npmscript_tesstalert_unpkg (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1hh235 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in testmgkregme (npm)
1 compromised version
- Sep 21, 2026
Malicious code in npx-test-ma980 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1sdsd2 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1ro (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test12vv36 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1df23 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in chai-testing (npm)
1 compromised version
- Sep 21, 2026
Malicious code in chat-adapter-matrix (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbsuedge3/xar (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @baanx/solana-lib (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/xa (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/auth (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/authxsas1 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/authxsas (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/x (npm)
1 compromised version
- Sep 21, 2026
Malicious code in catwrestlinghuman (npm)
1 compromised version
- Sep 21, 2026
Malicious code in action-slack-message-root (npm)
1 compromised version
- Sep 21, 2026
Malicious code in bulk-add-sdk (npm)
1 compromised version
- Sep 21, 2026
Malicious code in better-envforge (npm)
1 compromised version
- Sep 21, 2026
Malicious code in chai-as-viem (npm)
1 compromised version
- Sep 21, 2026
Malicious code in byted-commerce-materials (npm)
1 compromised version
Page 92 of 7,312