Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in supernova-astrochemistry-webpack-supervisor (npm)
- Nov 13, 2025
Malicious code in supernova-apex-brane-callback (npm)
- Nov 13, 2025
Malicious code in superflare-xenon-semantic-ui-fermiparadox (npm)
- Nov 13, 2025
Malicious code in superflare-tectonophysics-less-deimos (npm)
- Nov 13, 2025
Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)
- Nov 13, 2025
Malicious code in superflare-on-nestjs-xanthus (npm)
- Nov 13, 2025
Malicious code in superflare-aldebaran-phenomic-quantumfoam (npm)
- Nov 13, 2025
Malicious code in supercluster-webdriver-manager-pipe-alphard (npm)
- Nov 13, 2025
Malicious code in supercluster-vortex-blackhole-ultra (npm)
- Nov 13, 2025
Malicious code in supercluster-vega-ceres-meissa (npm)
- Nov 13, 2025
Malicious code in supercluster-neptune-juno-quantum-computing (npm)
- Nov 13, 2025
Malicious code in supercluster-grus-non-blocking-lepton (npm)
- Nov 13, 2025
Malicious code in supercluster-filament-cosmicweb-spectron (npm)
- Nov 13, 2025
Malicious code in supercluster-entanglement-firebase-multiverse (npm)
- Nov 13, 2025
Malicious code in supercluster-command-betelgeuse-style-loader (npm)
- Nov 13, 2025
Malicious code in superagent-zephyr-technosignature-passport (npm)
- Nov 13, 2025
Malicious code in superagent-spica-thermochronology-node-sass (npm)
- Nov 13, 2025
Malicious code in superagent-singularity-singularitarianism-vega (npm)
- Nov 13, 2025
Malicious code in superagent-quasar-exoplanetology-areology (npm)
- Nov 13, 2025
Malicious code in superagent-planckscale-prettier-transform (npm)
- Nov 13, 2025
Malicious code in superagent-parallax-winston-phoebe (npm)
- Nov 13, 2025
Malicious code in superagent-nodejs-darkenergy-fermiparadox (npm)
- Nov 13, 2025
Malicious code in superagent-loglevel-stop-rest (npm)
- Nov 13, 2025
Malicious code in sun-throw-export-xml-java (npm)
- Nov 13, 2025
Malicious code in sun-thread-monitor-void-sun (npm)
- Nov 13, 2025
Malicious code in sun-serialize-parse-validate-alert (npm)
- Nov 13, 2025
Malicious code in sun-kernel-nu-tree-simulate (npm)
- Nov 13, 2025
Malicious code in sun-good-optimize-big-sandbox (npm)
- Nov 13, 2025
Malicious code in sun-cold-upsilon-deploy-hash (npm)
- Nov 13, 2025
Malicious code in sun-bad-assert-secure-protected (npm)
- Nov 13, 2025
Malicious code in sudo-yaml-virtualize-encode-pi (npm)
- Nov 13, 2025
Malicious code in sudo-reject-mu-proxy-fork (npm)
- Nov 13, 2025
Malicious code in sudo-emulate-stack-deploy-psi (npm)
- Nov 13, 2025
Malicious code in subscription-resonance-singularitarianism-procyon (npm)
- Nov 13, 2025
Malicious code in subscription-proxima-levels-phenomic (npm)
- Nov 13, 2025
Malicious code in subscription-playwright-public-carina (npm)
- Nov 13, 2025
Malicious code in subscription-nightmare-nightmare-webdriver-manager (npm)
- Nov 13, 2025
Malicious code in subscription-jsonp-metabolomics-hawkingradiation (npm)
- Nov 13, 2025
Malicious code in subscription-interstellarmedium-toml-neuromorphic (npm)
- Nov 13, 2025
Malicious code in subscription-firebase-buffer-json (npm)
- Nov 13, 2025
Malicious code in subscription-carina-standard-exec (npm)
- Nov 13, 2025
Malicious code in subscription-asteroid-paleoanthropology-slides (npm)
- Nov 13, 2025
Malicious code in sublimation-sadr-magellan-sqlite (npm)
- Nov 13, 2025
Malicious code in sublimation-private-technosignature-futurology (npm)
- Nov 13, 2025
Malicious code in sublimation-orogeny-isostasy-australis (npm)
- Nov 13, 2025
Malicious code in sublimation-archaeoastronomy-browserify-build (npm)
- Nov 13, 2025
Malicious code in subduction-xenobiology-websockets-polaris (npm)
- Nov 13, 2025
Malicious code in subduction-repository-cassini-centauri (npm)
- Nov 13, 2025
Malicious code in subduction-pulsar-yaml-janus (npm)
- Nov 13, 2025
Malicious code in subduction-phylogenetics-tachyon-tethys (npm)
Page 284 of 4,809