Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,446 total in npm · sorted newest first- Nov 13, 2025
Malicious code in rocket-graviton-aurora-blueshift (npm)
- Nov 13, 2025
Malicious code in rocket-got-heka-json (npm)
- Nov 13, 2025
Malicious code in rocket-fomalhaut-sirius-kronos (npm)
- Nov 13, 2025
Malicious code in rocket-eleventy-alphard-changelog (npm)
- Nov 13, 2025
Malicious code in rocket-dynamo-supervisor-winston (npm)
- Nov 13, 2025
Malicious code in robotics-proxima-thuban-comet (npm)
- Nov 13, 2025
Malicious code in robotics-polaris-antares-cluster (npm)
- Nov 13, 2025
Malicious code in robotics-cosmiconfig-repository-metabolomics (npm)
- Nov 13, 2025
Malicious code in robotics-callback-vulcan-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in robotics-auriga-eclipse-parcel (npm)
- Nov 13, 2025
Malicious code in robotics-abiogenesis-command-react-bootstrap (npm)
- Nov 13, 2025
Malicious code in rimraf-webdriver-manager-impulse-dione (npm)
- Nov 13, 2025
Malicious code in rimraf-quantum-csv-javascript (npm)
- Nov 13, 2025
Malicious code in rimraf-playwright-morgan-norma (npm)
- Nov 13, 2025
Malicious code in rimraf-middleware-mysql-pavo (npm)
- Nov 13, 2025
Malicious code in rimraf-markdown-markdown-pdf-biomimicry (npm)
- Nov 13, 2025
Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)
- Nov 13, 2025
Malicious code in rimraf-isostasy-algol-paleoanthropology (npm)
- Nov 13, 2025
Malicious code in rimraf-centauri-loop-nightwatch (npm)
- Nov 13, 2025
Malicious code in rimraf-betelgeuse-baryon-selenium (npm)
- Nov 13, 2025
Malicious code in rigel-toml-meteor-version (npm)
- Nov 13, 2025
Malicious code in rigel-photon-interferometry-yaml (npm)
- Nov 13, 2025
Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in rigel-markdown-pdf-jsonp-restart (npm)
- Nov 13, 2025
Malicious code in rigel-levels-taurus-sagitta (npm)
- Nov 13, 2025
Malicious code in rigel-helios-phoebe-fermion (npm)
- Nov 13, 2025
Malicious code in rho-water-load-info-mu (npm)
- Nov 13, 2025
Malicious code in rho-object-test-char-shell (npm)
- Nov 13, 2025
Malicious code in rho-mu-catch-double-cloud (npm)
- Nov 13, 2025
Malicious code in rho-log-cluster-decode-pi (npm)
- Nov 13, 2025
Malicious code in rho-enum-secure-short-proxy (npm)
- Nov 13, 2025
Malicious code in rho-alpha-phi-cluster-water (npm)
- Nov 13, 2025
Malicious code in reveal-md-sirius-sequelize-nebula (npm)
- Nov 13, 2025
Malicious code in reveal-md-process-ichnology-local (npm)
- Nov 13, 2025
Malicious code in reveal-md-neptune-run-script-ignite (npm)
- Nov 13, 2025
Malicious code in reveal-md-electron-builder-chalk-steganography (npm)
- Nov 13, 2025
Malicious code in reveal-md-cosmos-apex-bootstrap (npm)
- Nov 13, 2025
Malicious code in reveal-md-cladistics-brane-blazar (npm)
- Nov 13, 2025
Malicious code in restart-warp-webdriver-mocha-sync (npm)
- Nov 13, 2025
Malicious code in restart-virtualreality-cli-spectron (npm)
- Nov 13, 2025
Malicious code in restart-jabbah-module-quantum-computing (npm)
- Nov 13, 2025
Malicious code in restart-apex-loopback-cors (npm)
- Nov 13, 2025
Malicious code in restart-andromeda-levels-geckodriver (npm)
- Nov 13, 2025
Malicious code in rest-version-library-hadron (npm)
- Nov 13, 2025
Malicious code in rest-rocket-lint-staged-triton (npm)
- Nov 13, 2025
Malicious code in rest-paleomagnetism-eris-got (npm)
- Nov 13, 2025
Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)
- Nov 13, 2025
Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in rest-neptune-style-loader-nconf (npm)
- Nov 13, 2025
Malicious code in rest-lightyear-mensa-quasarjet (npm)
Page 294 of 4,809