Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in spectron-mini-css-extract-plugin-enif-commitizen (npm)
- Nov 13, 2025
Malicious code in spectron-markdown-avior-auth0 (npm)
- Nov 13, 2025
Malicious code in spectron-grunt-auth-europa (npm)
- Nov 13, 2025
Malicious code in spectron-flare-css-loader-tethys (npm)
- Nov 13, 2025
Malicious code in spectron-csv-dynamo-bunyan (npm)
- Nov 13, 2025
Malicious code in spectron-config-cluster-command (npm)
- Nov 13, 2025
Malicious code in spectron-commitizen-server-jwt (npm)
- Nov 13, 2025
Malicious code in spectron-chromedriver-thermosphere-cosmogenic (npm)
- Nov 13, 2025
Malicious code in spawn-webpack-nightwatch-slides (npm)
- Nov 13, 2025
Malicious code in spawn-venus-hydra-cordelia (npm)
- Nov 13, 2025
Malicious code in spawn-scorpius-antares-hexo (npm)
- Nov 13, 2025
Malicious code in spawn-rigel-petrology-ganymede (npm)
- Nov 13, 2025
Malicious code in spawn-regulus-brane-nodemon (npm)
- Nov 13, 2025
Malicious code in spawn-nova-antares-sync (npm)
- Nov 13, 2025
Malicious code in spawn-miranda-publish-galaxy (npm)
- Nov 13, 2025
Malicious code in spawn-exec-zenobia-ganymede (npm)
- Nov 13, 2025
Malicious code in spawn-corvus-elektra-iota (npm)
- Nov 13, 2025
Malicious code in spawn-auth0-less-loader-phoenix (npm)
- Nov 13, 2025
Malicious code in solis-troposphere-slides-meissa (npm)
- Nov 13, 2025
Malicious code in solis-semantic-release-pm2-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in solis-promise-janus-aurora (npm)
- Nov 13, 2025
Malicious code in solis-perseus-bootstrap-nebula (npm)
- Nov 13, 2025
Malicious code in solis-chakra-ui-comet-lint (npm)
- Nov 13, 2025
Malicious code in solarnebula-testcafe-redshift-isostasy (npm)
- Nov 13, 2025
Malicious code in solarnebula-parcel-biohacking-iota (npm)
- Nov 13, 2025
Malicious code in solarnebula-nextjs-start-request (npm)
- Nov 13, 2025
Malicious code in solarnebula-browserify-lightyear-nextjs (npm)
- Nov 13, 2025
Malicious code in solarnebula-betelgeuse-mui-apollo (npm)
- Nov 13, 2025
Malicious code in solarnebula-await-superposition-aquarius (npm)
- Nov 13, 2025
Malicious code in socketio-webdriver-mocha-kinetic-quantum (npm)
- Nov 13, 2025
Malicious code in socketio-spawn-pyxis-nestjs (npm)
- Nov 13, 2025
Malicious code in socketio-polaris-restart-adonis (npm)
- Nov 13, 2025
Malicious code in socketio-elara-europa-dotenv (npm)
- Nov 13, 2025
Malicious code in socketio-cordelia-nightwatch-petrology (npm)
- Nov 13, 2025
Malicious code in socketio-chalk-middleware-public (npm)
- Nov 13, 2025
Malicious code in socketio-canopus-palynology-jupiter (npm)
- Nov 13, 2025
Malicious code in socket-uglify-notify-assert-encrypt (npm)
- Nov 13, 2025
Malicious code in socket-table-grid-sigma-deserialize (npm)
- Nov 13, 2025
Malicious code in socket-sigma-minify-pipe-array (npm)
- Nov 13, 2025
Malicious code in socket-mock-java-rho-spy (npm)
- Nov 13, 2025
Malicious code in socket-minify-export-catch-file (npm)
- Nov 13, 2025
Malicious code in socket-link-resolve-try-encrypt (npm)
- Nov 13, 2025
Malicious code in socket-file-analyze-encode-monitor (npm)
- Nov 13, 2025
Malicious code in socket-easy-balance-virtualize-simple (npm)
- Nov 13, 2025
Malicious code in socket-earth-yaml-sun-encrypt (npm)
- Nov 13, 2025
Malicious code in socket-decrypt-tau-big-compress (npm)
- Nov 13, 2025
Malicious code in sociobiology-radiometric-relay-geochemistry (npm)
- Nov 13, 2025
Malicious code in sociobiology-promise-spinner-docusaurus (npm)
- Nov 13, 2025
Malicious code in sociobiology-castor-package-prompts (npm)
- Nov 13, 2025
Malicious code in soap-winston-thuban-pyxis (npm)
Page 287 of 4,809