Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in sagitta-antares-winston-dotenv (npm)
- Nov 13, 2025
Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in sadr-proxima-uninstall-native (npm)
- Nov 13, 2025
Malicious code in sadr-passport-mantle-meissa (npm)
- Nov 13, 2025
Malicious code in sadr-nodemon-cosmology-server (npm)
- Nov 13, 2025
Malicious code in sadr-membrane-slides-meteor (npm)
- Nov 13, 2025
Malicious code in sadr-janus-apex-acamar (npm)
- Nov 13, 2025
Malicious code in sadr-dactyl-xenon-cli (npm)
- Nov 13, 2025
Malicious code in sadr-cosmicsilence-paleoclimatology-despina (npm)
- Nov 13, 2025
Malicious code in sadr-corvus-janus-eclipse (npm)
- Nov 13, 2025
Malicious code in runtime-void-resolve-assert-public (npm)
- Nov 13, 2025
Malicious code in runtime-stack-awk-visualize-monitor (npm)
- Nov 13, 2025
Malicious code in runtime-short-fork-yaml-pipe (npm)
- Nov 13, 2025
Malicious code in runtime-promise-assert-async-serialize (npm)
- Nov 13, 2025
Malicious code in runtime-parse-user-authenticate-runtime (npm)
- Nov 13, 2025
Malicious code in run-script-zenith-mantle-blaze (npm)
- Nov 13, 2025
Malicious code in run-script-yaml-fomalhaut-eslint-config (npm)
- Nov 13, 2025
Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)
- Nov 13, 2025
Malicious code in run-script-sagitta-pulsar-alphard (npm)
- Nov 13, 2025
Malicious code in run-script-koa-json-cli (npm)
- Nov 13, 2025
Malicious code in run-script-juno-supernova-commitlint (npm)
- Nov 13, 2025
Malicious code in run-script-australis-quito-repository (npm)
- Nov 13, 2025
Malicious code in route-proxy-alpha-export-monitor (npm)
- Nov 13, 2025
Malicious code in route-permission-grep-quick-debug (npm)
- Nov 13, 2025
Malicious code in route-easy-function-moon-warn (npm)
- Nov 13, 2025
Malicious code in route-compile-good-private-tree (npm)
- Nov 13, 2025
Malicious code in route-await-root-monitor-nu (npm)
- Nov 13, 2025
Malicious code in root-user-await-validate-iota (npm)
- Nov 13, 2025
Malicious code in root-root-iota-link-error (npm)
- Nov 13, 2025
Malicious code in root-resolve-wind-stub-interface (npm)
- Nov 13, 2025
Malicious code in root-rain-catch-sigma-float (npm)
- Nov 13, 2025
Malicious code in root-fire-user-hash-static (npm)
- Nov 13, 2025
Malicious code in root-cluster-bad-final-rho (npm)
- Nov 13, 2025
Malicious code in root-analyze-short-warn-byte (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-octans-fomalhaut-dependencies (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-loglevel-archaeoastronomy-on (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-hugo-library-biotechnology (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-firebase-geochronology-version (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver (npm)
- Nov 13, 2025
Malicious code in rollup-nova-wavefunction-rimraf (npm)
- Nov 13, 2025
Malicious code in rollup-neptune-webdriver-manager-eslint-plugin (npm)
- Nov 13, 2025
Malicious code in rocket-vortex-nebula-barnard (npm)
- Nov 13, 2025
Malicious code in rocket-polaris-prettier-schema (npm)
- Nov 13, 2025
Malicious code in rocket-planetology-mira-convict (npm)
- Nov 13, 2025
Malicious code in rocket-package-sass-loader-avior (npm)
- Nov 13, 2025
Malicious code in rocket-jest-astrophysics-speleology (npm)
Page 293 of 4,809