Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in vega-xerxes-meissa-chalk (npm)
- Nov 13, 2025
Malicious code in vega-toml-hexo-quito (npm)
- Nov 13, 2025
Malicious code in vega-panspermia-jwt-gemini (npm)
- Nov 13, 2025
Malicious code in vega-joviology-vega-bellatrix (npm)
- Nov 13, 2025
Malicious code in vega-eclipse-paleoclimatology-lacerta (npm)
- Nov 13, 2025
Malicious code in vega-cypress-miranda-tethys (npm)
- Nov 13, 2025
Malicious code in vega-commitlint-prosthetics-cressida (npm)
- Nov 13, 2025
Malicious code in user-route-fast-easy-sigma (npm)
- Nov 13, 2025
Malicious code in user-root-node-transpile-class (npm)
- Nov 13, 2025
Malicious code in user-reject-good-code-sed (npm)
- Nov 13, 2025
Malicious code in user-refactor-cluster-transpile-eta (npm)
- Nov 13, 2025
Malicious code in user-lambda-decompress-benchmark-omega (npm)
- Nov 13, 2025
Malicious code in user-double-signal-node-upsilon (npm)
- Nov 13, 2025
Malicious code in user-boolean-info-decode-try (npm)
- Nov 13, 2025
Malicious code in user-book-gamma-notify-old (npm)
- Nov 13, 2025
Malicious code in user-benchmark-omega-benchmark-socket (npm)
- Nov 13, 2025
Malicious code in user-analyze-uglify-minify-easy (npm)
- Nov 13, 2025
Malicious code in ursa-weywot-ursa-betelgeuse (npm)
- Nov 13, 2025
Malicious code in ursa-testcafe-innercore-planckscale (npm)
- Nov 13, 2025
Malicious code in ursa-rest-fetch-thermochronology (npm)
- Nov 13, 2025
Malicious code in ursa-readable-astrophysics-wolf (npm)
- Nov 13, 2025
Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in ursa-process-query-metabolomics (npm)
- Nov 13, 2025
Malicious code in ursa-pino-pretty-petrology-quark (npm)
- Nov 13, 2025
Malicious code in ursa-neptune-private-scripts (npm)
- Nov 13, 2025
Malicious code in ursa-mui-rest-xerxes (npm)
- Nov 13, 2025
Malicious code in ursa-lynx-baryon-ophiuchus (npm)
- Nov 13, 2025
Malicious code in ursa-jest-antd-helmet (npm)
- Nov 13, 2025
Malicious code in ursa-inflation-atlas-taphonomy (npm)
- Nov 13, 2025
Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)
- Nov 13, 2025
Malicious code in ursa-eslint-gemini-vortex (npm)
- Nov 13, 2025
Malicious code in ursa-eslint-config-draco-kronos (npm)
- Nov 13, 2025
Malicious code in ursa-comet-cosmogenic-virgo (npm)
- Nov 13, 2025
Malicious code in ursa-auth0-delphinus-nodejs (npm)
- Nov 13, 2025
Malicious code in uranology-version-flare-hydra (npm)
- Nov 13, 2025
Malicious code in uranology-sagitta-cors-cluster (npm)
- Nov 13, 2025
Malicious code in uranology-less-markdown-pdf-eclipse (npm)
- Nov 13, 2025
Malicious code in uranology-development-nucleosynthesis-rimraf (npm)
- Nov 13, 2025
Malicious code in uranology-blueshift-kuiperbelt-aether (npm)
- Nov 13, 2025
Malicious code in upsilon-socket-cluster-static-eta (npm)
- Nov 13, 2025
Malicious code in upsilon-sed-authenticate-await-tau (npm)
- Nov 13, 2025
Malicious code in upsilon-sandbox-static-module-validate (npm)
- Nov 13, 2025
Malicious code in upsilon-parse-module-virtualize-sandbox (npm)
- Nov 13, 2025
Malicious code in upsilon-fork-pi-index-emulate (npm)
- Nov 13, 2025
Malicious code in upsilon-fast-epsilon-optimize-interface (npm)
- Nov 13, 2025
Malicious code in upsilon-decode-long-socket-final (npm)
- Nov 13, 2025
Malicious code in upsilon-decode-catch-log-function (npm)
- Nov 13, 2025
Malicious code in upsilon-catch-new-epsilon-unix (npm)
- Nov 13, 2025
Malicious code in upgrade-quantum-computing-eslint-plugin-areology (npm)
- Nov 13, 2025
Malicious code in upgrade-ophiuchus-nightwatch-lyra (npm)
Page 276 of 4,809