Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in soap-weywot-robotics-on (npm)
- Nov 13, 2025
Malicious code in soap-wasat-frontend-astroinformatics (npm)
- Nov 13, 2025
Malicious code in soap-slidev-carpo-restart (npm)
- Nov 13, 2025
Malicious code in soap-odin-config-sails (npm)
- Nov 13, 2025
Malicious code in soap-nconf-europa-kronos (npm)
- Nov 13, 2025
Malicious code in soap-membrane-thermosphere-eridanus (npm)
- Nov 13, 2025
Malicious code in soap-commitizen-markdown-janus (npm)
- Nov 13, 2025
Malicious code in soap-comet-adonis-karma (npm)
- Nov 13, 2025
Malicious code in soap-callback-convict-middleware (npm)
- Nov 13, 2025
Malicious code in soap-auth0-tailwindcss-convict (npm)
- Nov 13, 2025
Malicious code in small-web-encrypt-grep-serialize (npm)
- Nov 13, 2025
Malicious code in small-validate-psi-import-stack (npm)
- Nov 13, 2025
Malicious code in small-route-assert-compile-interface (npm)
- Nov 13, 2025
Malicious code in small-interpret-java-reject-data (npm)
- Nov 13, 2025
Malicious code in small-bundle-function-minify-query (npm)
- Nov 13, 2025
Malicious code in small-analyze-theta-signal-daemon (npm)
- Nov 13, 2025
Malicious code in slow-promise-delta-root-view (npm)
- Nov 13, 2025
Malicious code in slow-data-moon-object-serialize (npm)
- Nov 13, 2025
Malicious code in slidev-webdriverio-geodynamo-figures (npm)
- Nov 13, 2025
Malicious code in slidev-supernova-pavo-zephyr (npm)
- Nov 13, 2025
Malicious code in slidev-scorpius-dotenv-aldebaran (npm)
- Nov 13, 2025
Malicious code in slidev-rigel-uninstall-dependencies (npm)
- Nov 13, 2025
Malicious code in slidev-resonance-farout-baryon (npm)
- Nov 13, 2025
Malicious code in slidev-parallax-epimetheus-redis (npm)
- Nov 13, 2025
Malicious code in slidev-odin-charon-pino-pretty (npm)
- Nov 13, 2025
Malicious code in slidev-levels-install-jasmine (npm)
- Nov 13, 2025
Malicious code in slidev-deimos-heka-warp (npm)
- Nov 13, 2025
Malicious code in slidev-airbnb-phoebe-library (npm)
- Nov 13, 2025
Malicious code in slides-quark-thermochronology-meteor (npm)
- Nov 13, 2025
Malicious code in slides-public-alphard-canopus (npm)
- Nov 13, 2025
Malicious code in slides-photon-nightwatch-stratigraphy (npm)
- Nov 13, 2025
Malicious code in slides-install-dynamo-dotenv-parse-variables (npm)
- Nov 13, 2025
Malicious code in slides-convict-husky-kaus (npm)
- Nov 13, 2025
Malicious code in slides-callisto-algol-sagitta (npm)
- Nov 13, 2025
Malicious code in sirius-yonder-algol-quantum (npm)
- Nov 13, 2025
Malicious code in sirius-stop-umbra-spawn (npm)
- Nov 13, 2025
Malicious code in sirius-spectron-webdriver-mutation-glaciology (npm)
- Nov 13, 2025
Malicious code in sirius-scorpius-sirius-parsec (npm)
- Nov 13, 2025
Malicious code in sirius-robotics-loopback-cosmicray (npm)
- Nov 13, 2025
Malicious code in sirius-registry-webpack-quasar (npm)
- Nov 13, 2025
Malicious code in sirius-react-bootstrap-ignite-pegasus (npm)
- Nov 13, 2025
Malicious code in sirius-phoebe-zenobia-babel (npm)
- Nov 13, 2025
Malicious code in sirius-nuxtjs-genomics-hydrogeology (npm)
- Nov 13, 2025
Malicious code in sirius-miranda-astrometry-exoplanetology (npm)
- Nov 13, 2025
Malicious code in sirius-lynx-antares-server (npm)
- Nov 13, 2025
Malicious code in sirius-darkmatter-lint-staged-cli (npm)
- Nov 13, 2025
Malicious code in sirius-darkenergy-selenium-stream (npm)
- Nov 13, 2025
Malicious code in sirius-blaze-decoherence-scripts (npm)
- Nov 13, 2025
Malicious code in sirius-astroinformatics-ursa-futurology (npm)
- Nov 13, 2025
Malicious code in singularity-rigel-quasarjet-husky (npm)
Page 288 of 4,809