Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in yonder-less-loader-ini-auth (npm)
- Nov 13, 2025
Malicious code in yonder-fermion-delphinus-transform (npm)
- Nov 13, 2025
Malicious code in yildun-tethys-eigenstate-alphard (npm)
- Nov 13, 2025
Malicious code in yildun-mesosphere-redis-spectron (npm)
- Nov 13, 2025
Malicious code in yildun-fork-chalk-farout (npm)
- Nov 13, 2025
Malicious code in yildun-cors-convict-ursa (npm)
- Nov 13, 2025
Malicious code in yildun-blitz-miranda-accretion (npm)
- Nov 13, 2025
Malicious code in yaml-root-xml-process-proxy (npm)
- Nov 13, 2025
Malicious code in yaml-phoenix-sequelize-redshift (npm)
- Nov 13, 2025
Malicious code in yaml-notify-authorize-code-web (npm)
- Nov 13, 2025
Malicious code in yaml-kappa-integer-uglify-serialize (npm)
- Nov 13, 2025
Malicious code in yaml-iota-jasmine-norma (npm)
- Nov 13, 2025
Malicious code in yaml-halley-astrobiology-mutation (npm)
- Nov 13, 2025
Malicious code in yaml-entanglement-radiant-geodynamo (npm)
- Nov 13, 2025
Malicious code in yaml-chi-cloud-nu-code (npm)
- Nov 13, 2025
Malicious code in yaml-cache-sails-jwt (npm)
- Nov 13, 2025
Malicious code in yaml-barnard-jekyll-magnetar (npm)
- Nov 13, 2025
Malicious code in yakutsk-server-hydrogeology-saturnology (npm)
- Nov 13, 2025
Malicious code in yakutsk-saturnology-grus-prosthetics (npm)
- Nov 13, 2025
Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)
- Nov 13, 2025
Malicious code in yakutsk-luna-nova-triton (npm)
- Nov 13, 2025
Malicious code in yakutsk-electron-nebula-jekyll (npm)
- Nov 13, 2025
Malicious code in yakutsk-blueshift-supervisor-socketio (npm)
- Nov 13, 2025
Malicious code in yakutsk-alphard-winston-nconf (npm)
- Nov 13, 2025
Malicious code in xo-sequelize-thermochronology-resonance (npm)
- Nov 13, 2025
Malicious code in xo-quasarjet-publish-npm (npm)
- Nov 13, 2025
Malicious code in xo-phylogenetics-kastra-triton (npm)
- Nov 13, 2025
Malicious code in xo-nightmare-magellan-eslint-plugin (npm)
- Nov 13, 2025
Malicious code in xo-morgan-css-loader-prompts (npm)
- Nov 13, 2025
Malicious code in xo-mini-css-extract-plugin-vega-koa (npm)
- Nov 13, 2025
Malicious code in xo-koa-metalsmith-perseus (npm)
- Nov 13, 2025
Malicious code in xo-indus-procyon-indus (npm)
- Nov 13, 2025
Malicious code in xo-helios-child-process-pm2 (npm)
- Nov 13, 2025
Malicious code in xo-halley-less-loader-cache (npm)
- Nov 13, 2025
Malicious code in xo-csrf-radiant-halley (npm)
- Nov 13, 2025
Malicious code in xo-castor-frontend-indus (npm)
- Nov 13, 2025
Malicious code in xml-sigma-meta-daemon-delta (npm)
- Nov 13, 2025
Malicious code in xml-sails-cluster-mysql (npm)
- Nov 13, 2025
Malicious code in xml-proxima-rest-process (npm)
- Nov 13, 2025
Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota (npm)
- Nov 13, 2025
Malicious code in xml-phoebe-protoplanetarydisk-magnetar (npm)
- Nov 13, 2025
Malicious code in xml-oberon-axios-neuromorphic (npm)
- Nov 13, 2025
Malicious code in xml-ganymede-blackhole-chalk (npm)
- Nov 13, 2025
Malicious code in xml-eris-lyra-tectonophysics (npm)
- Nov 13, 2025
Malicious code in xi-moon-star-fire-await (npm)
- Nov 13, 2025
Malicious code in xi-minify-bundle-sigma-query (npm)
- Nov 13, 2025
Malicious code in xi-grid-module-sed-warn (npm)
- Nov 13, 2025
Malicious code in xi-abstract-user-alert-parse (npm)
- Nov 13, 2025
Malicious code in xerxes-perseus-antd-subscription (npm)
- Nov 13, 2025
Malicious code in xerxes-paleontology-dorado-pavo (npm)
Page 270 of 4,809