Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)
- Nov 13, 2025
Malicious code in redshift-deimos-neptune-yakutsk (npm)
- Nov 13, 2025
Malicious code in redshift-build-geodynamo-hyperion (npm)
- Nov 13, 2025
Malicious code in redis-parsec-fomalhaut-nebula (npm)
- Nov 13, 2025
Malicious code in redis-markdownlint-meteor-winston (npm)
- Nov 13, 2025
Malicious code in redis-epimetheus-jabbah-apex (npm)
- Nov 13, 2025
Malicious code in redis-corvus-transform-dependencies (npm)
- Nov 13, 2025
Malicious code in redis-browserify-nuxtjs-winston (npm)
- Nov 13, 2025
Malicious code in redis-astrophysics-astrophysics-webpack (npm)
- Nov 13, 2025
Malicious code in redis-adonis-quito-io (npm)
- Nov 13, 2025
Malicious code in redis-acamar-terser-webpack-plugin-deneb (npm)
- Nov 13, 2025
Malicious code in redgiant-nightwatch-filament-mensa (npm)
- Nov 13, 2025
Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)
- Nov 13, 2025
Malicious code in redgiant-gammarayburst-event-miranda (npm)
- Nov 13, 2025
Malicious code in redgiant-cypress-mesosphere-technosignature (npm)
- Nov 13, 2025
Malicious code in redgiant-callisto-altair-npm (npm)
- Nov 13, 2025
Malicious code in readable-ophiuchus-markdownlint-colors (npm)
- Nov 13, 2025
Malicious code in readable-karma-xml-fusion (npm)
- Nov 13, 2025
Malicious code in readable-holography-buffer-odin (npm)
- Nov 13, 2025
Malicious code in readable-enif-module-saturnology (npm)
- Nov 13, 2025
Malicious code in readable-configstore-regulus-public (npm)
- Nov 13, 2025
Malicious code in readable-commitizen-photon-gatsby (npm)
- Nov 13, 2025
Malicious code in react-bootstrap-phoenix-janus-module (npm)
- Nov 13, 2025
Malicious code in react-bootstrap-nightwatch-levels-command (npm)
- Nov 13, 2025
Malicious code in react-bootstrap-await-vortex-betelgeuse (npm)
- Nov 13, 2025
Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)
- Nov 13, 2025
Malicious code in rate-limiter-tethys-fermiparadox-cosmos (npm)
- Nov 13, 2025
Malicious code in rate-limiter-technosignature-genomics-cypress (npm)
- Nov 13, 2025
Malicious code in rate-limiter-selenology-australis-interferometry (npm)
- Nov 13, 2025
Malicious code in rate-limiter-hyperion-pavo-protractor (npm)
- Nov 13, 2025
Malicious code in rate-limiter-fork-command-hyperion (npm)
- Nov 13, 2025
Malicious code in rate-limiter-express-iota-registry (npm)
- Nov 13, 2025
Malicious code in rate-limiter-chalk-miranda-cassini (npm)
- Nov 13, 2025
Malicious code in rate-limiter-callback-nebula-electron (npm)
- Nov 13, 2025
Malicious code in rate-limiter-aurora-helmet-perseus (npm)
- Nov 13, 2025
Malicious code in rate-limiter-areology-dorado-apex (npm)
- Nov 13, 2025
Malicious code in rate-limiter-achernar-hydrogeology-antimatter (npm)
- Nov 13, 2025
Malicious code in rain-theta-thread-star-simulate (npm)
- Nov 13, 2025
Malicious code in rain-interface-java-bundle-wind (npm)
- Nov 13, 2025
Malicious code in rain-final-bash-bad-resolve (npm)
- Nov 13, 2025
Malicious code in radiometric-vega-element-ui-oortcloud (npm)
- Nov 13, 2025
Malicious code in radiometric-stratigraphy-nodemon-start (npm)
- Nov 13, 2025
Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)
- Nov 13, 2025
Malicious code in radiometric-nova-rocket-transport (npm)
- Nov 13, 2025
Malicious code in radiometric-native-adonis-cygnus (npm)
- Nov 13, 2025
Malicious code in radiometric-csrf-odin-tool (npm)
- Nov 13, 2025
Malicious code in radioastronomy-zooarchaeology-got-magnetar (npm)
- Nov 13, 2025
Malicious code in radioastronomy-readable-proxima-sadr (npm)
- Nov 13, 2025
Malicious code in radioastronomy-photon-eslint-apollo (npm)
- Nov 13, 2025
Malicious code in radioastronomy-mongoose-inquirer-hyperion (npm)
Page 297 of 4,809