Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in publish-zephyr-tethys-jwt (npm)
- Nov 13, 2025
Malicious code in publish-yildun-magnetosphere-process (npm)
- Nov 13, 2025
Malicious code in publish-xanthus-cypress-redis (npm)
- Nov 13, 2025
Malicious code in publish-webdriverio-event-capella (npm)
- Nov 13, 2025
Malicious code in publish-vuepress-sails-foundation (npm)
- Nov 13, 2025
Malicious code in publish-thermosphere-native-cosmochemistry (npm)
- Nov 13, 2025
Malicious code in publish-superagent-rollup-plugin-commitlint (npm)
- Nov 13, 2025
Malicious code in publish-sadr-event-readable (npm)
- Nov 13, 2025
Malicious code in publish-proxima-glaciology-kinetic (npm)
- Nov 13, 2025
Malicious code in publish-prettier-stylelint-seismology-cors (npm)
- Nov 13, 2025
Malicious code in publish-postcss-loader-achernar-hermes (npm)
- Nov 13, 2025
Malicious code in publish-oscillation-astrochemistry-spectron (npm)
- Nov 13, 2025
Malicious code in publish-nova-helios-restart (npm)
- Nov 13, 2025
Malicious code in publish-magellan-magnetosphere-paleomagnetism (npm)
- Nov 13, 2025
Malicious code in publish-magellan-loop-puppeteer (npm)
- Nov 13, 2025
Malicious code in publish-json-solis-apollo (npm)
- Nov 13, 2025
Malicious code in publish-jest-sadr-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in publish-ichnology-eslint-config-luna (npm)
- Nov 13, 2025
Malicious code in publish-antimatter-augmentedreality-hawkingradiation (npm)
- Nov 13, 2025
Malicious code in publish-alphard-convict-halley (npm)
- Nov 13, 2025
Malicious code in publish-airbnb-changelog-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in publish-adonis-asteroid-acamar (npm)
- Nov 13, 2025
Malicious code in public-process-wind-debug-view (npm)
- Nov 13, 2025
Malicious code in public-perseus-zenith-blitz (npm)
- Nov 13, 2025
Malicious code in public-mechatronics-polaris-seismology (npm)
- Nov 13, 2025
Malicious code in public-jovian-solarnebula-lacerta (npm)
- Nov 13, 2025
Malicious code in public-gacrux-jsonp-sirius (npm)
- Nov 13, 2025
Malicious code in public-final-iota-upsilon-array (npm)
- Nov 13, 2025
Malicious code in public-eclipse-wavefunction-entanglement (npm)
- Nov 13, 2025
Malicious code in public-dog-secure-user-omega (npm)
- Nov 13, 2025
Malicious code in public-bundle-class-iota-thread (npm)
- Nov 13, 2025
Malicious code in public-auth-hermes-command (npm)
- Nov 13, 2025
Malicious code in public-atlas-europa-umbra (npm)
- Nov 13, 2025
Malicious code in psi-sudo-key-simulate-double (npm)
- Nov 13, 2025
Malicious code in psi-monitor-old-hot-dog (npm)
- Nov 13, 2025
Malicious code in proxy-rain-decode-xi-error (npm)
- Nov 13, 2025
Malicious code in proxy-process-rho-chi-web (npm)
- Nov 13, 2025
Malicious code in proxy-meta-pi-theta-bad (npm)
- Nov 13, 2025
Malicious code in proxy-interface-visualize-thread-psi (npm)
- Nov 13, 2025
Malicious code in proxy-encode-cache-easy-delta (npm)
- Nov 13, 2025
Malicious code in proxy-decrypt-bad-byte-cat (npm)
- Nov 13, 2025
Malicious code in proxy-cache-beta-iota-water (npm)
- Nov 13, 2025
Malicious code in proxima-uglify-js-biomimicry-quasar (npm)
- Nov 13, 2025
Malicious code in proxima-thermosphere-weywot-websockets (npm)
- Nov 13, 2025
Malicious code in proxima-spawn-mongoose-brane (npm)
- Nov 13, 2025
Malicious code in proxima-shelljs-spinner-brane (npm)
- Nov 13, 2025
Malicious code in proxima-sequelize-miranda-chalk (npm)
- Nov 13, 2025
Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in proxima-nightmare-postgres-seismology (npm)
- Nov 13, 2025
Malicious code in proxima-neptune-altair-neptune (npm)
Page 300 of 4,809