Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in xerxes-nuxtjs-enif-superposition (npm)
- Nov 13, 2025
Malicious code in xerxes-non-blocking-baryon-solarnebula (npm)
- Nov 13, 2025
Malicious code in xerxes-koa-promise-meteor (npm)
- Nov 13, 2025
Malicious code in xerxes-coronalmassejection-flare-filament (npm)
- Nov 13, 2025
Malicious code in xerxes-auth-jekyll-ionosphere (npm)
- Nov 13, 2025
Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)
- Nov 13, 2025
Malicious code in xenos-upgrade-orbit-kinetic (npm)
- Nov 13, 2025
Malicious code in xenos-nconf-aurora-redis (npm)
- Nov 13, 2025
Malicious code in xenos-lepton-cosmogenic-telesto (npm)
- Nov 13, 2025
Malicious code in xenos-cladistics-dotenv-safe-joviology (npm)
- Nov 13, 2025
Malicious code in xenos-chai-changelog-helmet (npm)
- Nov 13, 2025
Malicious code in xenon-sirius-scripts-regulus (npm)
- Nov 13, 2025
Malicious code in xenon-release-it-telesto-jabbah (npm)
- Nov 13, 2025
Malicious code in xenon-proxima-whitedwarf-jsonp (npm)
- Nov 13, 2025
Malicious code in xenon-prettier-plugin-markdown-csv-barnard (npm)
- Nov 13, 2025
Malicious code in xenon-graviton-gravity-pulsar (npm)
- Nov 13, 2025
Malicious code in xenon-ganymede-got-fusion (npm)
- Nov 13, 2025
Malicious code in xenon-command-futurology-quasar (npm)
- Nov 13, 2025
Malicious code in xenon-comet-xo-quantum (npm)
- Nov 13, 2025
Malicious code in xenon-apex-ultra-zenith (npm)
- Nov 13, 2025
Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)
- Nov 13, 2025
Malicious code in xenobiology-materialize-epimetheus-atlas (npm)
- Nov 13, 2025
Malicious code in xenobiology-hermes-selenology-umbriel (npm)
- Nov 13, 2025
Malicious code in xenobiology-galaxy-supervisor-ophiuchus (npm)
- Nov 13, 2025
Malicious code in xenobiology-electron-deneb-rimraf (npm)
- Nov 13, 2025
Malicious code in xenobiology-darkmatter-fermion-io (npm)
- Nov 13, 2025
Malicious code in xanthus-zenobia-entanglement-prompts (npm)
- Nov 13, 2025
Malicious code in xanthus-websockets-helios-duplex (npm)
- Nov 13, 2025
Malicious code in xanthus-tectonic-levels-xanadu (npm)
- Nov 13, 2025
Malicious code in xanthus-redis-scripts-fomalhaut (npm)
- Nov 13, 2025
Malicious code in xanthus-got-telesto-accretion (npm)
- Nov 13, 2025
Malicious code in xanthus-fusion-oauth-halley (npm)
- Nov 13, 2025
Malicious code in xanthus-dotenv-safe-markdownlint-xerxes (npm)
- Nov 13, 2025
Malicious code in xanthus-cosmiconfig-nightwatch-eridanus (npm)
- Nov 13, 2025
Malicious code in xanthus-child-process-radiant-biotechnology (npm)
- Nov 13, 2025
Malicious code in xanadu-singularitarianism-fetch-fermion (npm)
- Nov 13, 2025
Malicious code in xanadu-proxima-transport-hermes (npm)
- Nov 13, 2025
Malicious code in xanadu-paleontology-zooarchaeology-triton (npm)
- Nov 13, 2025
Malicious code in xanadu-ganymede-thuban-polaris (npm)
- Nov 13, 2025
Malicious code in xanadu-dotenv-safe-markdownlint-materialize (npm)
- Nov 13, 2025
Malicious code in writable-lint-helmet-betelgeuse (npm)
- Nov 13, 2025
Malicious code in writable-jovian-pino-markdownlint (npm)
- Nov 13, 2025
Malicious code in wormhole-passport-norma-gravitationalwave (npm)
- Nov 13, 2025
Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm)
- Nov 13, 2025
Malicious code in wolf-baryon-pino-phenomic (npm)
- Nov 13, 2025
Malicious code in winston-writable-betelgeuse-jekyll (npm)
- Nov 13, 2025
Malicious code in winston-tectonophysics-quito-luna (npm)
- Nov 13, 2025
Malicious code in winston-process-fetch-server (npm)
- Nov 13, 2025
Malicious code in winston-polaris-rollup-despina (npm)
- Nov 13, 2025
Malicious code in winston-pino-jasmine-jupiter (npm)
Page 271 of 4,809