Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in radioastronomy-holography-express-avior (npm)
- Nov 13, 2025
Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm)
- Nov 13, 2025
Malicious code in radioastronomy-eslint-plugin-procyon-kastra (npm)
- Nov 13, 2025
Malicious code in radioastronomy-augmentedreality-library-style-loader (npm)
- Nov 13, 2025
Malicious code in radiant-toml-primatology-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in radiant-relay-castor-bulma (npm)
- Nov 13, 2025
Malicious code in radiant-on-oscillation-indus (npm)
- Nov 13, 2025
Malicious code in radiant-nestjs-parcel-apex (npm)
- Nov 13, 2025
Malicious code in radiant-express-terser-bellatrix (npm)
- Nov 13, 2025
Malicious code in radiant-express-sync-tachyon (npm)
- Nov 13, 2025
Malicious code in radiant-event-bootstrap-geodynamo (npm)
- Nov 13, 2025
Malicious code in radiant-cross-env-neutrino-local (npm)
- Nov 13, 2025
Malicious code in quito-rocket-radiant-middleware (npm)
- Nov 13, 2025
Malicious code in quito-process-oscillation-nanotechnology (npm)
- Nov 13, 2025
Malicious code in quito-fornax-dynamo-csrf (npm)
- Nov 13, 2025
Malicious code in quito-cryovolcano-nightwatch-subscription (npm)
- Nov 13, 2025
Malicious code in quito-config-lightyear-quito (npm)
- Nov 13, 2025
Malicious code in quick-validate-transpile-cluster-route (npm)
- Nov 13, 2025
Malicious code in quick-serialize-small-bash-delta (npm)
- Nov 13, 2025
Malicious code in quick-orchestrate-resolve-cat-tau (npm)
- Nov 13, 2025
Malicious code in quick-info-star-new-import (npm)
- Nov 13, 2025
Malicious code in quick-decode-transpile-array-wind (npm)
- Nov 13, 2025
Malicious code in query-sed-hash-mu-link (npm)
- Nov 13, 2025
Malicious code in query-relay-tethys-got (npm)
- Nov 13, 2025
Malicious code in query-regulus-bionics-subscription (npm)
- Nov 13, 2025
Malicious code in query-betelgeuse-nebula-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in quasarjet-umbriel-global-rest (npm)
- Nov 13, 2025
Malicious code in quasarjet-prettier-plugin-markdown-supervisor-astrometry (npm)
- Nov 13, 2025
Malicious code in quasarjet-magellan-eslint-config-capella (npm)
- Nov 13, 2025
Malicious code in quasarjet-cluster-ionosphere-eslint (npm)
- Nov 13, 2025
Malicious code in quasar-robotics-soap-winston (npm)
- Nov 13, 2025
Malicious code in quasar-promise-kaus-quito (npm)
- Nov 13, 2025
Malicious code in quasar-oauth-perseus-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in quasar-helmet-metabolomics-node-config (npm)
- Nov 13, 2025
Malicious code in quasar-element-ui-radioastronomy-ganymede (npm)
- Nov 13, 2025
Malicious code in quasar-capella-bootstrap-kastra (npm)
- Nov 13, 2025
Malicious code in quasar-backend-altair-callback (npm)
- Nov 13, 2025
Malicious code in quasar-auth-spectron-thuban (npm)
- Nov 13, 2025
Malicious code in quasar-astrophysics-less-paleontology (npm)
- Nov 13, 2025
Malicious code in quark-postcss-soap-nova (npm)
- Nov 13, 2025
Malicious code in quark-photon-eris-speleology (npm)
- Nov 13, 2025
Malicious code in quark-perturbation-lyra-link (npm)
- Nov 13, 2025
Malicious code in quark-loopback-palynology-cypress (npm)
- Nov 13, 2025
Malicious code in quark-iota-paleoclimatology-enif (npm)
- Nov 13, 2025
Malicious code in quark-hugo-geckodriver-ionosphere (npm)
- Nov 13, 2025
Malicious code in quark-eslint-config-materialize-css-loader (npm)
- Nov 13, 2025
Malicious code in quark-dotenv-safe-run-script-planckscale (npm)
- Nov 13, 2025
Malicious code in quark-dorado-ethology-loglevel (npm)
- Nov 13, 2025
Malicious code in quark-charon-hercules-lepton (npm)
- Nov 13, 2025
Malicious code in quark-aquarius-weywot-prettier-stylelint (npm)
Page 298 of 4,809