Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in umbra-enif-sirius-lightyear (npm)
- Nov 13, 2025
Malicious code in umbra-australis-dotenv-safe-google (npm)
- Nov 13, 2025
Malicious code in ultra-winston-standard-neutrino (npm)
- Nov 13, 2025
Malicious code in ultra-mira-centaurus-io (npm)
- Nov 13, 2025
Malicious code in ultra-library-remark-transform (npm)
- Nov 13, 2025
Malicious code in ultra-karma-nuxtjs-nanotechnology (npm)
- Nov 13, 2025
Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)
- Nov 13, 2025
Malicious code in uglify-zeta-tree-delta-runtime (npm)
- Nov 13, 2025
Malicious code in uglify-view-stub-simulate-short (npm)
- Nov 13, 2025
Malicious code in uglify-parse-socket-new-error (npm)
- Nov 13, 2025
Malicious code in uglify-js-leda-epigenetics-speleology (npm)
- Nov 13, 2025
Malicious code in uglify-js-gravity-upgrade-aether (npm)
- Nov 13, 2025
Malicious code in uglify-js-gatsby-mocha-titan (npm)
- Nov 13, 2025
Malicious code in uglify-js-buffer-exosphere-soap (npm)
- Nov 13, 2025
Malicious code in uglify-bash-index-beta-interface (npm)
- Nov 13, 2025
Malicious code in typeorm-xanthus-solis-soap (npm)
- Nov 13, 2025
Malicious code in typeorm-warp-procyon-non-blocking (npm)
- Nov 13, 2025
Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)
- Nov 13, 2025
Malicious code in typeorm-postcss-process-biomimicry (npm)
- Nov 13, 2025
Malicious code in typeorm-nestjs-equinox-europa (npm)
- Nov 13, 2025
Malicious code in typeorm-kuiperbelt-miranda-tachyon (npm)
- Nov 13, 2025
Malicious code in typeorm-indus-restart-update (npm)
- Nov 13, 2025
Malicious code in typeorm-csv-troposphere-socketio (npm)
- Nov 13, 2025
Malicious code in try-stub-yaml-query-awk (npm)
- Nov 13, 2025
Malicious code in try-signal-lambda-execute-kernel (npm)
- Nov 13, 2025
Malicious code in try-phi-lambda-public-validate (npm)
- Nov 13, 2025
Malicious code in try-import-fork-socket-beta (npm)
- Nov 13, 2025
Malicious code in try-data-signal-cloud-report (npm)
- Nov 13, 2025
Malicious code in try-benchmark-assert-module-protected (npm)
- Nov 13, 2025
Malicious code in try-alert-hash-catch-index (npm)
- Nov 13, 2025
Malicious code in troposphere-passport-dotenv-safe-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in troposphere-elektra-supernova-antares (npm)
- Nov 13, 2025
Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in triton-subduction-gravitationalwave-sociobiology (npm)
- Nov 13, 2025
Malicious code in triton-subduction-darkenergy-boson (npm)
- Nov 13, 2025
Malicious code in triton-radiant-epimetheus-await (npm)
- Nov 13, 2025
Malicious code in triton-proxima-impulse-dotenv-parse-variables (npm)
- Nov 13, 2025
Malicious code in triton-perseus-paleobotany-changelog (npm)
- Nov 13, 2025
Malicious code in triton-nconf-sublimation-grus (npm)
- Nov 13, 2025
Malicious code in triton-meissa-indus-phenomic (npm)
- Nov 13, 2025
Malicious code in tree-validate-info-signal-abstract (npm)
- Nov 13, 2025
Malicious code in tree-psi-air-moon-air (npm)
- Nov 13, 2025
Malicious code in tree-notify-report-decrypt-scale (npm)
- Nov 13, 2025
Malicious code in tree-notify-fire-resolve-scale (npm)
- Nov 13, 2025
Malicious code in tree-function-kappa-decrypt-assert (npm)
- Nov 13, 2025
Malicious code in tree-awk-notify-beta-cloud (npm)
- Nov 13, 2025
Malicious code in transport-xanadu-delphinus-achernar (npm)
- Nov 13, 2025
Malicious code in transport-ursa-spinner-pulsar (npm)
- Nov 13, 2025
Malicious code in transport-technocracy-geomorphology-bellatrix (npm)
- Nov 13, 2025
Malicious code in transport-semantic-release-cressida-middleware (npm)
Page 278 of 4,809