Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in promise-umbra-css-loader-postcss-loader (npm)
- Nov 13, 2025
Malicious code in promise-selenium-bellatrix-mysql (npm)
- Nov 13, 2025
Malicious code in promise-meta-node-orchestrate-proxy (npm)
- Nov 13, 2025
Malicious code in promise-jovian-cli-nightwatch (npm)
- Nov 13, 2025
Malicious code in promise-interpret-cache-final-process (npm)
- Nov 13, 2025
Malicious code in promise-impulse-levels-exec (npm)
- Nov 13, 2025
Malicious code in promise-hawkingradiation-paleoclimatology-prompts (npm)
- Nov 13, 2025
Malicious code in promise-dynamo-umbriel-jwt (npm)
- Nov 13, 2025
Malicious code in promise-dog-link-authorize-boolean (npm)
- Nov 13, 2025
Malicious code in promise-compile-interface-benchmark-fire (npm)
- Nov 13, 2025
Malicious code in promise-carina-astroinformatics-regulus (npm)
- Nov 13, 2025
Malicious code in promise-aurora-kastra-backend (npm)
- Nov 13, 2025
Malicious code in promise-algol-cosmicsilence-adonis (npm)
- Nov 13, 2025
Malicious code in procyon-yaml-figures-toml (npm)
- Nov 13, 2025
Malicious code in procyon-spectron-webdriver-nestjs-gridsome (npm)
- Nov 13, 2025
Malicious code in procyon-slidev-process-webpack (npm)
- Nov 13, 2025
Malicious code in procyon-procyon-xml-planetology (npm)
- Nov 13, 2025
Malicious code in procyon-planckscale-steganography-procyon (npm)
- Nov 13, 2025
Malicious code in procyon-mesosphere-gemini-arcturus (npm)
- Nov 13, 2025
Malicious code in procyon-lacerta-wezen-geochemistry (npm)
- Nov 13, 2025
Malicious code in procyon-json-dynamo-neutrino (npm)
- Nov 13, 2025
Malicious code in procyon-futurology-concurrently-sqlite (npm)
- Nov 13, 2025
Malicious code in procyon-cosmos-mutation-pyxis (npm)
- Nov 13, 2025
Malicious code in procyon-cluster-janus-fomalhaut (npm)
- Nov 13, 2025
Malicious code in procyon-aurora-zenith-indus (npm)
- Nov 13, 2025
Malicious code in procyon-andromeda-configstore-javascript (npm)
- Nov 13, 2025
Malicious code in process-simulate-parse-integer-wind (npm)
- Nov 13, 2025
Malicious code in process-passport-eslint-config-speleology (npm)
- Nov 13, 2025
Malicious code in process-outercore-nestjs-leda (npm)
- Nov 13, 2025
Malicious code in process-loopback-cosmos-leda (npm)
- Nov 13, 2025
Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in process-float-sanitize-module-import (npm)
- Nov 13, 2025
Malicious code in process-daemon-pipe-try-bundle (npm)
- Nov 13, 2025
Malicious code in process-callisto-superagent-quark (npm)
- Nov 13, 2025
Malicious code in private-toml-nightwatch-rigel (npm)
- Nov 13, 2025
Malicious code in private-sadr-proxima-private (npm)
- Nov 13, 2025
Malicious code in private-husky-mensa-package (npm)
- Nov 13, 2025
Malicious code in private-enum-compress-upsilon-omega (npm)
- Nov 13, 2025
Malicious code in private-easy-string-decrypt-meta (npm)
- Nov 13, 2025
Malicious code in private-dorado-grunt-jupiter (npm)
- Nov 13, 2025
Malicious code in private-cluster-draco-mysql (npm)
- Nov 13, 2025
Malicious code in private-centauri-miranda-areology (npm)
- Nov 13, 2025
Malicious code in private-abstract-optimize-view-rain (npm)
- Nov 13, 2025
Malicious code in primatology-technosignature-magnetosphere-parcel (npm)
- Nov 13, 2025
Malicious code in primatology-paleoecology-archaeoastronomy-chariklo (npm)
- Nov 13, 2025
Malicious code in primatology-paleoceanography-mineralogy-wolf (npm)
- Nov 13, 2025
Malicious code in primatology-middleware-planckscale-install (npm)
- Nov 13, 2025
Malicious code in primatology-impulse-decoherence-standard (npm)
- Nov 13, 2025
Malicious code in primatology-chromedriver-vortex-nebula (npm)
- Nov 13, 2025
Malicious code in primatology-callback-dactyl-telesto (npm)
Page 302 of 4,809