Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in vortex-husky-sqlite-exobiology (npm)
- Nov 13, 2025
Malicious code in vortex-enceladus-slides-xanthus (npm)
- Nov 13, 2025
Malicious code in vortex-auth0-string-holography (npm)
- Nov 13, 2025
Malicious code in volcanology-yakutsk-phenomic-xo (npm)
- Nov 13, 2025
Malicious code in void-uglify-warn-export-zero (npm)
- Nov 13, 2025
Malicious code in void-oberon-supernova-package (npm)
- Nov 13, 2025
Malicious code in void-kernel-integer-visualize-string (npm)
- Nov 13, 2025
Malicious code in void-grus-superagent-planckscale (npm)
- Nov 13, 2025
Malicious code in void-fork-zero-log-code (npm)
- Nov 13, 2025
Malicious code in void-exoplanet-ganymede-geodynamo (npm)
- Nov 13, 2025
Malicious code in void-cassini-thermosphere-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in visualize-visualize-test-assert-monitor (npm)
- Nov 13, 2025
Malicious code in visualize-validate-array-hot-analyze (npm)
- Nov 13, 2025
Malicious code in visualize-object-xml-long-sigma (npm)
- Nov 13, 2025
Malicious code in visualize-interface-byte-char-chi (npm)
- Nov 13, 2025
Malicious code in visualize-decompress-finally-abstract-final (npm)
- Nov 13, 2025
Malicious code in visualize-cache-web-float-slow (npm)
- Nov 13, 2025
Malicious code in virtualreality-paleoecology-nova-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in virtualreality-gatsby-brane-lynx (npm)
- Nov 13, 2025
Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm)
- Nov 13, 2025
Malicious code in virtualreality-biotechnology-standard-chakra-ui (npm)
- Nov 13, 2025
Malicious code in virtualreality-algol-loglevel-nebula (npm)
- Nov 13, 2025
Malicious code in virtualreality-abiogenesis-passport-chalk (npm)
- Nov 13, 2025
Malicious code in virtualize-reject-secure-finally-function (npm)
- Nov 13, 2025
Malicious code in virtualize-kernel-string-cluster-mu (npm)
- Nov 13, 2025
Malicious code in virtualize-cache-cloud-cat-slow (npm)
- Nov 13, 2025
Malicious code in virgo-terser-webpack-plugin-resonance-jekyll (npm)
- Nov 13, 2025
Malicious code in virgo-joviology-proxima-install (npm)
- Nov 13, 2025
Malicious code in virgo-framework-dependencies-firebase (npm)
- Nov 13, 2025
Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)
- Nov 13, 2025
Malicious code in virgo-build-equinox-init (npm)
- Nov 13, 2025
Malicious code in virgo-async-astrobiology-nashira (npm)
- Nov 13, 2025
Malicious code in virgo-arcturus-hydra-stream (npm)
- Nov 13, 2025
Malicious code in virgo-airbnb-accretion-backend (npm)
- Nov 13, 2025
Malicious code in view-warn-bash-rain-old (npm)
- Nov 13, 2025
Malicious code in view-visualize-nu-shell-small (npm)
- Nov 13, 2025
Malicious code in view-omicron-unix-compress-authorize (npm)
- Nov 13, 2025
Malicious code in view-object-promise-xi-table (npm)
- Nov 13, 2025
Malicious code in view-fire-data-simple-uglify (npm)
- Nov 13, 2025
Malicious code in view-deploy-scale-promise-await (npm)
- Nov 13, 2025
Malicious code in version-virtualreality-scorpius-wezen (npm)
- Nov 13, 2025
Malicious code in version-sass-loader-webpack-quantum-computing (npm)
- Nov 13, 2025
Malicious code in version-pyxis-spawn-epimetheus (npm)
- Nov 13, 2025
Malicious code in version-meteor-jupiter-chariklo (npm)
- Nov 13, 2025
Malicious code in version-dactyl-npm-colors (npm)
- Nov 13, 2025
Malicious code in version-aquarius-run-script-nova (npm)
- Nov 13, 2025
Malicious code in venus-phoebe-heliophysics-winston (npm)
- Nov 13, 2025
Malicious code in venus-nextjs-heka-solis (npm)
- Nov 13, 2025
Malicious code in venus-epimetheus-halley-json (npm)
- Nov 13, 2025
Malicious code in venus-dactyl-publish-markdownlint (npm)
Page 275 of 4,809