Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in webpack-borealis-paleoceanography-odin (npm)
- Nov 13, 2025
Malicious code in webdriverio-wavefunction-publish-asteroid (npm)
- Nov 13, 2025
Malicious code in webdriverio-vuetify-antares-wezen (npm)
- Nov 13, 2025
Malicious code in webdriverio-umbriel-sequelize-version (npm)
- Nov 13, 2025
Malicious code in webdriverio-thermosphere-cladistics-multiverse (npm)
- Nov 13, 2025
Malicious code in webdriverio-rate-limiter-wormhole-version (npm)
- Nov 13, 2025
Malicious code in webdriverio-npm-supervisor-blaze (npm)
- Nov 13, 2025
Malicious code in webdriverio-meissa-terser-node-sass (npm)
- Nov 13, 2025
Malicious code in webdriverio-less-loader-relay-venus (npm)
- Nov 13, 2025
Malicious code in webdriverio-jasmine-dione-perseus (npm)
- Nov 13, 2025
Malicious code in webdriverio-europa-perseus-metalsmith (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-tectonic-leda-antimatter (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-scripts-hadron-augmentedreality (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-isostasy-arcturus-eslint-config (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-ionosphere-commitlint-inflation (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-electron-cache-dione (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-chromedriver-javascript-json (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-browserify-polaris-cache (npm)
- Nov 13, 2025
Malicious code in webdriver-mocha-apollo-server-shelljs (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-venus-coronalmassejection-spica (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-stratosphere-stratigraphy-stop (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-sociobiology-wezen-winston (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-parcel-innercore-redgiant (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-neptunology-oscillation-fornax (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-neptune-vulcan-scorpius (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-deneb-nconf-outercore (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-cosmos-mongoose-got (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-bulma-pino-pretty-hercules (npm)
- Nov 13, 2025
Malicious code in webdriver-manager-aether-less-loader-mensa (npm)
- Nov 13, 2025
Malicious code in web-yaml-analyze-finally-short (npm)
- Nov 13, 2025
Malicious code in web-route-final-nu-route (npm)
- Nov 13, 2025
Malicious code in web-container-container-sigma-optimize (npm)
- Nov 13, 2025
Malicious code in web-compile-deploy-load-secure (npm)
- Nov 13, 2025
Malicious code in wavefunction-prompts-webdriver-mocha-vuetify (npm)
- Nov 13, 2025
Malicious code in wavefunction-procyon-archaeoastronomy-uranology (npm)
- Nov 13, 2025
Malicious code in wavefunction-perturbation-stratosphere-supercluster (npm)
- Nov 13, 2025
Malicious code in wavefunction-parallax-jovian-jasmine (npm)
- Nov 13, 2025
Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa (npm)
- Nov 13, 2025
Malicious code in wavefunction-crust-interstellarmedium-bootstrap (npm)
- Nov 13, 2025
Malicious code in wavefunction-ariel-pavo-equinox (npm)
- Nov 13, 2025
Malicious code in water-user-link-protected-await (npm)
- Nov 13, 2025
Malicious code in water-user-fast-sanitize-test (npm)
- Nov 13, 2025
Malicious code in water-omega-compile-pipe-book (npm)
- Nov 13, 2025
Malicious code in water-execute-rain-root-cloud (npm)
- Nov 13, 2025
Malicious code in water-cloud-public-big-user (npm)
- Nov 13, 2025
Malicious code in water-catch-cloud-upsilon-java (npm)
- Nov 13, 2025
Malicious code in water-balance-serialize-omicron-deploy (npm)
- Nov 13, 2025
Malicious code in water-await-kappa-byte-minify (npm)
Page 273 of 4,809