Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)
- Nov 13, 2025
Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in rest-neptune-style-loader-nconf (npm)
- Nov 13, 2025
Malicious code in rest-lightyear-mensa-quasarjet (npm)
- Nov 13, 2025
Malicious code in rest-auriga-bellatrix-wezen (npm)
- Nov 13, 2025
Malicious code in resonance-phylogenetics-config-aquarius (npm)
- Nov 13, 2025
Malicious code in resonance-middleware-octans-graviton (npm)
- Nov 13, 2025
Malicious code in resonance-frontend-gatsby-accretion (npm)
- Nov 13, 2025
Malicious code in resonance-centaurus-luna-interstellarmedium (npm)
- Nov 13, 2025
Malicious code in resolvers-typeorm-dependencies-development (npm)
- Nov 13, 2025
Malicious code in resolvers-superflare-chalk-ini (npm)
- Nov 13, 2025
Malicious code in resolvers-solis-native-rest (npm)
- Nov 13, 2025
Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda (npm)
- Nov 13, 2025
Malicious code in resolvers-query-comet-radiant (npm)
- Nov 13, 2025
Malicious code in resolvers-kinetic-eventhoriz-webpack (npm)
- Nov 13, 2025
Malicious code in resolvers-heliophysics-apollo-cli (npm)
- Nov 13, 2025
Malicious code in resolvers-gemini-abiogenesis-quantum (npm)
- Nov 13, 2025
Malicious code in resolvers-foundation-library-kastra (npm)
- Nov 13, 2025
Malicious code in resolvers-forever-mongoose-multiverse (npm)
- Nov 13, 2025
Malicious code in resolvers-chakra-ui-bootstrap-ursa (npm)
- Nov 13, 2025
Malicious code in resolvers-auth0-version-charon (npm)
- Nov 13, 2025
Malicious code in resolvers-auth-materialize-ionosphere (npm)
- Nov 13, 2025
Malicious code in resolve-code-sun-sanitize-fast (npm)
- Nov 13, 2025
Malicious code in request-slidev-jest-repository (npm)
- Nov 13, 2025
Malicious code in request-planetology-lynx-taphonomy (npm)
- Nov 13, 2025
Malicious code in request-gemini-prettier-plugin-markdown-hercules (npm)
- Nov 13, 2025
Malicious code in repository-reveal-md-multiverse-quasar (npm)
- Nov 13, 2025
Malicious code in repository-repository-nconf-barnard (npm)
- Nov 13, 2025
Malicious code in repository-heka-nestjs-mesosphere (npm)
- Nov 13, 2025
Malicious code in report-water-view-cluster-socket (npm)
- Nov 13, 2025
Malicious code in report-thread-benchmark-good-fork (npm)
- Nov 13, 2025
Malicious code in report-serialize-rho-public-file (npm)
- Nov 13, 2025
Malicious code in report-new-runtime-sun-user (npm)
- Nov 13, 2025
Malicious code in report-good-error-user-parse (npm)
- Nov 13, 2025
Malicious code in report-epsilon-socket-beta-sudo (npm)
- Nov 13, 2025
Malicious code in report-easy-fast-star-grep (npm)
- Nov 13, 2025
Malicious code in remark-loglevel-process-nebula (npm)
- Nov 13, 2025
Malicious code in remark-io-sass-loader-changelog (npm)
- Nov 13, 2025
Malicious code in remark-halley-terser-sagitta (npm)
- Nov 13, 2025
Malicious code in remark-fornax-ora-ganymede (npm)
- Nov 13, 2025
Malicious code in remark-exosphere-cosmicsilence-perseus (npm)
- Nov 13, 2025
Malicious code in remark-dorado-coronalmassejection-aldebaran (npm)
- Nov 13, 2025
Malicious code in remark-deneb-radiant-zenobia (npm)
- Nov 13, 2025
Malicious code in remark-ceres-version-chariklo (npm)
- Nov 13, 2025
Malicious code in remark-bellatrix-superposition-interstellarmedium (npm)
- Nov 13, 2025
Malicious code in remark-barnard-commitlint-loop (npm)
- Nov 13, 2025
Malicious code in release-it-perseus-ini-node-config (npm)
- Nov 13, 2025
Malicious code in release-it-nova-orbit-figures (npm)
- Nov 13, 2025
Malicious code in release-it-materialize-quasarjet-perturbation (npm)
- Nov 13, 2025
Malicious code in release-it-library-start-inquirer (npm)
Page 295 of 4,809