Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in server-carpo-carpo-cosmicray (npm)
- Nov 13, 2025
Malicious code in server-callback-css-loader-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in server-astrometry-ceres-aether (npm)
- Nov 13, 2025
Malicious code in server-asteroid-foundation-native (npm)
- Nov 13, 2025
Malicious code in serialize-stack-omega-node-authorize (npm)
- Nov 13, 2025
Malicious code in serialize-short-grep-async-float (npm)
- Nov 13, 2025
Malicious code in serialize-quick-alpha-book-resolve (npm)
- Nov 13, 2025
Malicious code in serialize-minify-decompress-mu-cron (npm)
- Nov 13, 2025
Malicious code in serialize-final-beta-deserialize-await (npm)
- Nov 13, 2025
Malicious code in serialize-eta-authenticate-authorize-sigma (npm)
- Nov 13, 2025
Malicious code in serialize-cloud-key-array-secure (npm)
- Nov 13, 2025
Malicious code in serialize-bash-authenticate-execute-cloud (npm)
- Nov 13, 2025
Malicious code in sequelize-slidev-forever-rollup (npm)
- Nov 13, 2025
Malicious code in sequelize-phoebe-bunyan-test (npm)
- Nov 13, 2025
Malicious code in sequelize-paleontology-gravity-webdriver-manager (npm)
- Nov 13, 2025
Malicious code in sequelize-ophiuchus-parcel-procyon (npm)
- Nov 13, 2025
Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm)
- Nov 13, 2025
Malicious code in sequelize-eris-europa-sails (npm)
- Nov 13, 2025
Malicious code in sequelize-configstore-neuromorphic-petrology (npm)
- Nov 13, 2025
Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)
- Nov 13, 2025
Malicious code in semantic-release-webdriver-mocha-holography-init (npm)
- Nov 13, 2025
Malicious code in semantic-release-boson-lepton-kastra (npm)
- Nov 13, 2025
Malicious code in semantic-release-aether-buffer-concurrently (npm)
- Nov 13, 2025
Malicious code in selenology-zenobia-loglevel-prettier-stylelint (npm)
- Nov 13, 2025
Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)
- Nov 13, 2025
Malicious code in selenology-dione-envconfig-avior (npm)
- Nov 13, 2025
Malicious code in selenium-uranology-quantum-computing-framework (npm)
- Nov 13, 2025
Malicious code in selenium-troposphere-nebula-betelgeuse (npm)
- Nov 13, 2025
Malicious code in selenium-neptunology-nucleosynthesis-axios (npm)
- Nov 13, 2025
Malicious code in selenium-halley-algol-init (npm)
- Nov 13, 2025
Malicious code in selenium-dotenv-parse-variables-gacrux-vega (npm)
- Nov 13, 2025
Malicious code in selenium-cluster-framework-eleventy (npm)
- Nov 13, 2025
Malicious code in selenium-avior-antimatter-registry (npm)
- Nov 13, 2025
Malicious code in seismology-paleomagnetism-fermiparadox-spectroscopy (npm)
- Nov 13, 2025
Malicious code in seismology-meteor-odin-galaxy (npm)
- Nov 13, 2025
Malicious code in seismology-jabbah-exosphere-mini-css-extract-plugin (npm)
- Nov 13, 2025
Malicious code in seismology-fornax-frontend-neutronstar (npm)
- Nov 13, 2025
Malicious code in seismology-enceladus-comet-singularity (npm)
- Nov 13, 2025
Malicious code in seismology-configstore-vuepress-global (npm)
- Nov 13, 2025
Malicious code in sedna-telesto-webpack-public (npm)
- Nov 13, 2025
Malicious code in sedna-shelljs-tailwindcss-photon (npm)
- Nov 13, 2025
Malicious code in sedna-semantic-release-meissa-winston (npm)
- Nov 13, 2025
Malicious code in sedna-rigel-package-xenos (npm)
- Nov 13, 2025
Malicious code in sedna-request-dysonswarm-enif (npm)
- Nov 13, 2025
Malicious code in sedna-palynology-aquarius-lithosphere (npm)
- Nov 13, 2025
Malicious code in sedna-nova-readable-levels (npm)
- Nov 13, 2025
Malicious code in sedna-nextjs-baryon-ceres (npm)
- Nov 13, 2025
Malicious code in sedna-json-yildun-helios (npm)
- Nov 13, 2025
Malicious code in sedna-jest-init-delphinus (npm)
- Nov 13, 2025
Malicious code in sedna-geodynamo-holography-paleontology (npm)
Page 290 of 4,809