Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 21, 2026
Malicious code in siriusbeyond (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @siriusbeyond/ui (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @siriusbeyond/utils (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @dbbhk/ui-components (npm)
1 compromised version
- Sep 21, 2026
Malicious code in commerce-materials (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1sdsd2 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in testmgkregme (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test12vv36 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1ro (npm)
2 compromised versions
- Sep 21, 2026
Malicious code in test1df23 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1hh235 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in test1gg234 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in npx-test-ma980 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in chai-testing (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @baanx/solana-lib (npm)
2 compromised versions
- Sep 21, 2026
Malicious code in @nimbusedge2/authxsas (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/auth (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/authxsas1 (npm)
1 compromised version
- Sep 21, 2026
Malicious code in npmscript_tesstalert_unpkg (npm)
4 compromised versions
- Sep 21, 2026
Malicious code in chat-adapter-matrix (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/x (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbusedge2/xa (npm)
1 compromised version
- Sep 21, 2026
Malicious code in @nimbsuedge3/xar (npm)
1 compromised version
- Sep 20, 2026
Malicious code in @pwaplatform/module-sso-integration (npm)
1 compromised version
- Sep 20, 2026
Malicious code in @pwaplatform/module-sso-integration (npm)
2 compromised versions
- Sep 20, 2026
Malicious code in @siriusbeyond/auth (npm)
1 compromised version
- Sep 20, 2026
Malicious code in starbucks-sdk (npm)
1 compromised version
- Sep 19, 2026
Malicious code in radio-player-theme (npm)
7 compromised versions
- Sep 19, 2026
Malicious code in urc (PyPI)
1 compromised version
- Sep 19, 2026
Malicious code in urc (PyPI)
1 compromised version
- Sep 19, 2026
Malicious code in keroeltop (npm)
1 compromised version
- Sep 19, 2026
Malicious code in py-venv-doctor (PyPI)
1 compromised version
- Sep 18, 2026
Malicious code in keroeltop (npm)
1 compromised version
- Sep 18, 2026
Malware in internallib_v949
1 compromised version
- Sep 18, 2026
Malicious code in py-venv-doctor (PyPI)
2 compromised versions
- Sep 18, 2026
Malicious code in x509-escaping (npm)
1 compromised version
- Sep 18, 2026
Malicious code in tailwindcss-forms-ui (npm)
1 compromised version
- Sep 18, 2026
Malicious code in chai-as-indexed (npm)
1 compromised version
- Sep 18, 2026
Malicious code in internallib_v949 (npm)
1 compromised version
- Sep 18, 2026
Malicious code in @shared-web/utils (npm)
1 compromised version
- Sep 18, 2026
Malicious code in @shared-runtime/modules (npm)
1 compromised version
- Sep 18, 2026
Malicious code in @insiderintelligence/googleadmanager (npm)
1 compromised version
- Sep 18, 2026
Malicious code in @shared-web/utils (npm)
1 compromised version
- Sep 18, 2026
Malicious code in chai-as-indexed (npm)
2 compromised versions
- Sep 18, 2026
Malicious code in @insiderintelligence/googleadmanager (npm)
2 compromised versions
- Sep 18, 2026
Malicious code in tailwindcss-forms-ui (npm)
1 compromised version
- Sep 18, 2026
Malicious code in @shared-runtime/modules (npm)
1 compromised version
- Sep 18, 2026
Malicious code in internallib_v949 (npm)
1 compromised version
- Sep 18, 2026
Malicious code in openmct-heatmap (npm)
- Sep 18, 2026
Malware in openmct-heatmap
1 compromised version
Page 93 of 7,312