Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,422 total in npm · sorted newest first- Nov 13, 2025
Malicious code in transport-registry-slidev-upgrade (npm)
- Nov 13, 2025
Malicious code in transport-postcss-loader-terser-betelgeuse (npm)
- Nov 13, 2025
Malicious code in transport-command-tachyon-foundation (npm)
- Nov 13, 2025
Malicious code in transport-betelgeuse-cluster-juno (npm)
- Nov 13, 2025
Malicious code in transport-babel-dagda-electron (npm)
- Nov 13, 2025
Malicious code in transpile-refactor-protected-promise-interface (npm)
- Nov 13, 2025
Malicious code in transpile-pi-cron-secure-double (npm)
- Nov 13, 2025
Malicious code in transpile-new-cache-iota-quick (npm)
- Nov 13, 2025
Malicious code in transpile-double-grep-book-iota (npm)
- Nov 13, 2025
Malicious code in transpile-bundle-upsilon-decrypt-secure (npm)
- Nov 13, 2025
Malicious code in transhumanism-release-it-neptune-init (npm)
- Nov 13, 2025
Malicious code in transhumanism-registry-nucleosynthesis-axios (npm)
- Nov 13, 2025
Malicious code in transhumanism-mesosphere-sirius-tectonophysics (npm)
- Nov 13, 2025
Malicious code in transhumanism-cli-superflare-hermes (npm)
- Nov 13, 2025
Malicious code in transhumanism-blueshift-thuban-geckodriver (npm)
- Nov 13, 2025
Malicious code in transhumanism-auriga-markdownlint-canopus (npm)
- Nov 13, 2025
Malicious code in transform-version-sequelize-native (npm)
- Nov 13, 2025
Malicious code in transform-semantic-ui-eleventy-phoebe (npm)
- Nov 13, 2025
Malicious code in transform-robotics-filament-orbit (npm)
- Nov 13, 2025
Malicious code in transform-pegasus-await-volcanology (npm)
- Nov 13, 2025
Malicious code in transform-galaxy-writable-slides (npm)
- Nov 13, 2025
Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in transform-ethology-weywot-style-loader (npm)
- Nov 13, 2025
Malicious code in transform-command-cors-parcel (npm)
- Nov 13, 2025
Malicious code in transform-carpo-charon-hapi (npm)
- Nov 13, 2025
Malicious code in transform-blitz-element-ui-helios (npm)
- Nov 13, 2025
Malicious code in tool-webdriver-mocha-prettier-axios (npm)
- Nov 13, 2025
Malicious code in tool-wavefunction-ultra-gridsome (npm)
- Nov 13, 2025
Malicious code in tool-tailwindcss-cosmology-native (npm)
- Nov 13, 2025
Malicious code in tool-pino-xenos-rollup (npm)
- Nov 13, 2025
Malicious code in tool-nightmare-cryovolcano-cryptography (npm)
- Nov 13, 2025
Malicious code in tool-dotenv-parse-variables-gravitationalwave-luna (npm)
- Nov 13, 2025
Malicious code in tool-dependencies-dotenv-library (npm)
- Nov 13, 2025
Malicious code in tool-callisto-betelgeuse-axios (npm)
- Nov 13, 2025
Malicious code in toml-terser-webpack-plugin-process-prompts (npm)
- Nov 13, 2025
Malicious code in toml-superflare-rollup-algol (npm)
- Nov 13, 2025
Malicious code in toml-slidev-nebula-antares (npm)
- Nov 13, 2025
Malicious code in toml-protractor-spinner-inflation (npm)
- Nov 13, 2025
Malicious code in toml-jwt-docusaurus-celeste (npm)
- Nov 13, 2025
Malicious code in toml-json-express-event (npm)
- Nov 13, 2025
Malicious code in toml-ethology-cordelia-carpo (npm)
- Nov 13, 2025
Malicious code in toml-csrf-quark-geodynamo (npm)
- Nov 13, 2025
Malicious code in toml-apollo-materialize-hexo (npm)
- Nov 13, 2025
Malicious code in toml-airbnb-cosmicsilence-bionics (npm)
- Nov 13, 2025
Malicious code in titan-soap-request-framework (npm)
- Nov 13, 2025
Malicious code in titan-luna-luna-prompts (npm)
- Nov 13, 2025
Malicious code in titan-link-wolf-unuk (npm)
- Nov 13, 2025
Malicious code in titan-iota-carina-vuepress (npm)
- Nov 13, 2025
Malicious code in titan-fusion-virgo-slides (npm)
- Nov 13, 2025
Malicious code in titan-enceladus-release-it-callisto (npm)
Page 279 of 4,809