Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in quantumfoam-zenobia-reveal-md-yaml (npm)
- Nov 13, 2025
Malicious code in quantumfoam-wavefunction-lacerta-singularity (npm)
- Nov 13, 2025
Malicious code in quantumfoam-run-script-troposphere-halley (npm)
- Nov 13, 2025
Malicious code in quantumfoam-rollup-xenobiology-csrf (npm)
- Nov 13, 2025
Malicious code in quantumfoam-dysonswarm-io-aquarius (npm)
- Nov 13, 2025
Malicious code in quantumfoam-biomimicry-sedna-zenith (npm)
- Nov 13, 2025
Malicious code in quantum-uglify-js-acamar-hyperion (npm)
- Nov 13, 2025
Malicious code in quantum-sirius-spinner-sirius (npm)
- Nov 13, 2025
Malicious code in quantum-rollup-plugin-neuromorphic-janus (npm)
- Nov 13, 2025
Malicious code in quantum-pegasus-winston-blitz (npm)
- Nov 13, 2025
Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)
- Nov 13, 2025
Malicious code in quantum-node-config-quito-cosmos (npm)
- Nov 13, 2025
Malicious code in quantum-exosphere-vortex-adonis (npm)
- Nov 13, 2025
Malicious code in quantum-darkmatter-native-schema (npm)
- Nov 13, 2025
Malicious code in quantum-computing-technosignature-ablation-bulma (npm)
- Nov 13, 2025
Malicious code in quantum-computing-server-phenomic-miranda (npm)
- Nov 13, 2025
Malicious code in quantum-computing-mira-volcanology-sublimation (npm)
- Nov 13, 2025
Malicious code in quantum-computing-less-loader-mensa-css-loader (npm)
- Nov 13, 2025
Malicious code in quantum-computing-frontend-halley-xml (npm)
- Nov 13, 2025
Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)
- Nov 13, 2025
Malicious code in quantum-computing-ceres-robotics-magellan (npm)
- Nov 13, 2025
Malicious code in quantum-child-process-vulcan-sagitta (npm)
- Nov 13, 2025
Malicious code in quantum-cache-nebula-radiant (npm)
- Nov 13, 2025
Malicious code in pyxis-sedna-nebula-sedna (npm)
- Nov 13, 2025
Malicious code in pyxis-hercules-scripts-request (npm)
- Nov 13, 2025
Malicious code in pyxis-enif-wasat-borealis (npm)
- Nov 13, 2025
Malicious code in pyxis-blueshift-metalsmith-enceladus (npm)
- Nov 13, 2025
Malicious code in pyxis-asthenosphere-astro-server (npm)
- Nov 13, 2025
Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in puppeteer-tailwindcss-karma-postcss (npm)
- Nov 13, 2025
Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)
- Nov 13, 2025
Malicious code in puppeteer-prettier-stylelint-cluster-delphinus (npm)
- Nov 13, 2025
Malicious code in puppeteer-module-sails-nextjs (npm)
- Nov 13, 2025
Malicious code in puppeteer-meissa-prettier-plugin-markdown-sadr (npm)
- Nov 13, 2025
Malicious code in puppeteer-geckodriver-redshift-eslint-config (npm)
- Nov 13, 2025
Malicious code in puppeteer-fornax-prettier-deneb (npm)
- Nov 13, 2025
Malicious code in puppeteer-exobiology-semantic-release-less (npm)
- Nov 13, 2025
Malicious code in pulsar-selenium-oortcloud-dorado (npm)
- Nov 13, 2025
Malicious code in pulsar-run-script-process-io (npm)
- Nov 13, 2025
Malicious code in pulsar-puppeteer-dagda-cosmology (npm)
- Nov 13, 2025
Malicious code in pulsar-phoebe-apex-iota (npm)
- Nov 13, 2025
Malicious code in pulsar-orogeny-heliophysics-morgan (npm)
- Nov 13, 2025
Malicious code in pulsar-mocha-saturnology-jupiter (npm)
- Nov 13, 2025
Malicious code in pulsar-interferometry-singularitarianism-husky (npm)
- Nov 13, 2025
Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)
- Nov 13, 2025
Malicious code in pulsar-exoplanetology-archaeoastronomy-repository (npm)
- Nov 13, 2025
Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)
- Nov 13, 2025
Malicious code in pulsar-crust-acamar-technosignature (npm)
- Nov 13, 2025
Malicious code in pulsar-apollo-decoherence-public (npm)
- Nov 13, 2025
Malicious code in publish-zooarchaeology-achernar-resolvers (npm)
Page 299 of 4,809