Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in saturnology-darkenergy-sadr-paleobotany (npm)
- Nov 13, 2025
Malicious code in saturnology-blueshift-parcel-deimos (npm)
- Nov 13, 2025
Malicious code in saturnology-astroinformatics-release-it-test (npm)
- Nov 13, 2025
Malicious code in sass-loader-prompts-inquirer-blaze (npm)
- Nov 13, 2025
Malicious code in sass-loader-lepton-nebula-virgo (npm)
- Nov 13, 2025
Malicious code in sass-loader-iota-lyra-fomalhaut (npm)
- Nov 13, 2025
Malicious code in sass-loader-fornax-passport-geoarchaeology (npm)
- Nov 13, 2025
Malicious code in sass-loader-cluster-link-jekyll (npm)
- Nov 13, 2025
Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
- Nov 13, 2025
Malicious code in sass-loader-canopus-mesosphere-concurrently (npm)
- Nov 13, 2025
Malicious code in sanitize-sed-transpile-analyze-sandbox (npm)
- Nov 13, 2025
Malicious code in sanitize-new-link-code-void (npm)
- Nov 13, 2025
Malicious code in sanitize-module-pi-code-static (npm)
- Nov 13, 2025
Malicious code in sanitize-hot-quick-log-byte (npm)
- Nov 13, 2025
Malicious code in sanitize-eta-promise-error-awk (npm)
- Nov 13, 2025
Malicious code in sanitize-analyze-benchmark-deploy-encode (npm)
- Nov 13, 2025
Malicious code in sandbox-table-async-void-export (npm)
- Nov 13, 2025
Malicious code in sandbox-scale-promise-unix-resolve (npm)
- Nov 13, 2025
Malicious code in sandbox-quick-hash-psi-throw (npm)
- Nov 13, 2025
Malicious code in sandbox-long-compress-book-log (npm)
- Nov 13, 2025
Malicious code in sandbox-kernel-web-good-static (npm)
- Nov 13, 2025
Malicious code in sandbox-interface-async-awk-proxy (npm)
- Nov 13, 2025
Malicious code in sandbox-hot-cron-query-boolean (npm)
- Nov 13, 2025
Malicious code in sandbox-final-enum-export-emulate (npm)
- Nov 13, 2025
Malicious code in sandbox-export-integer-alpha-java (npm)
- Nov 13, 2025
Malicious code in sandbox-bash-authorize-hot-simulate (npm)
- Nov 13, 2025
Malicious code in sails-winston-radioastronomy-charon (npm)
- Nov 13, 2025
Malicious code in sails-soap-link-webdriver-mocha (npm)
- Nov 13, 2025
Malicious code in sails-rollup-unuk-xo (npm)
- Nov 13, 2025
Malicious code in sails-remark-terser-hyperion (npm)
- Nov 13, 2025
Malicious code in sails-link-update-glaciology (npm)
- Nov 13, 2025
Malicious code in sails-europa-nextjs-version (npm)
- Nov 13, 2025
Malicious code in sails-dotenv-adonis-antd (npm)
- Nov 13, 2025
Malicious code in sails-blueshift-string-warp (npm)
- Nov 13, 2025
Malicious code in sagitta-wolf-barnard-geckodriver (npm)
- Nov 13, 2025
Malicious code in sagitta-whitedwarf-betelgeuse-plutology (npm)
- Nov 13, 2025
Malicious code in sagitta-tachyon-rocket-nodemon (npm)
- Nov 13, 2025
Malicious code in sagitta-sublimation-sagitta-halley (npm)
- Nov 13, 2025
Malicious code in sagitta-shelljs-halley-grunt (npm)
- Nov 13, 2025
Malicious code in sagitta-schema-release-it-husky (npm)
- Nov 13, 2025
Malicious code in sagitta-query-brane-parallax (npm)
- Nov 13, 2025
Malicious code in sagitta-publish-wasat-fornax (npm)
- Nov 13, 2025
Malicious code in sagitta-protractor-taurus-csv (npm)
- Nov 13, 2025
Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in sagitta-mira-ceres-darkenergy (npm)
- Nov 13, 2025
Malicious code in sagitta-jest-orbit-dotenv (npm)
- Nov 13, 2025
Malicious code in sagitta-javascript-process-telesto (npm)
- Nov 13, 2025
Malicious code in sagitta-izar-dagda-nightmare (npm)
- Nov 13, 2025
Malicious code in sagitta-frontend-eslint-config-cors (npm)
- Nov 13, 2025
Malicious code in sagitta-child-process-subscription-vuetify (npm)
Page 292 of 4,809