Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in primatology-algol-postgres-unuk (npm)
- Nov 13, 2025
Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism (npm)
- Nov 13, 2025
Malicious code in prettier-stylelint-soap-acamar-build (npm)
- Nov 13, 2025
Malicious code in prettier-stylelint-got-cosmos-ariel (npm)
- Nov 13, 2025
Malicious code in prettier-stylelint-astrobiology-loopback-sirius (npm)
- Nov 13, 2025
Malicious code in prettier-registry-forever-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-toml-reveal-md-event (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-mantle-hermes-geodynamo (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-lint-jest-scripts (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-json-joviology-filament (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)
- Nov 13, 2025
Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)
- Nov 13, 2025
Malicious code in prettier-pegasus-version-sirius (npm)
- Nov 13, 2025
Malicious code in prettier-oberon-unuk-semantic-ui (npm)
- Nov 13, 2025
Malicious code in prettier-meteor-mineralogy-vuepress (npm)
- Nov 13, 2025
Malicious code in prettier-luna-mysql-stratosphere (npm)
- Nov 13, 2025
Malicious code in prettier-json-publish-quito (npm)
- Nov 13, 2025
Malicious code in prettier-despina-gacrux-shelljs (npm)
- Nov 13, 2025
Malicious code in prettier-cordelia-npm-toml (npm)
- Nov 13, 2025
Malicious code in postgres-soap-apex-vortex (npm)
- Nov 13, 2025
Malicious code in postgres-proteomics-markdown-abiogenesis (npm)
- Nov 13, 2025
Malicious code in postgres-promise-transform-farout (npm)
- Nov 13, 2025
Malicious code in postgres-procyon-nextjs-nuxtjs (npm)
- Nov 13, 2025
Malicious code in postgres-on-sqlite-archaeogenetics (npm)
- Nov 13, 2025
Malicious code in postgres-buffer-prettier-stylelint-lithosphere (npm)
- Nov 13, 2025
Malicious code in postgres-asteroid-readable-dione (npm)
- Nov 13, 2025
Malicious code in postcss-proxima-eris-restart (npm)
- Nov 13, 2025
Malicious code in postcss-mongodb-astrometry-eslint-config (npm)
- Nov 13, 2025
Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)
- Nov 13, 2025
Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
- Nov 13, 2025
Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)
- Nov 13, 2025
Malicious code in postcss-loader-install-thuban-pipe (npm)
- Nov 13, 2025
Malicious code in postcss-loader-hapi-publish-event (npm)
- Nov 13, 2025
Malicious code in postcss-loader-ganymede-metalsmith-farout (npm)
- Nov 13, 2025
Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)
- Nov 13, 2025
Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)
- Nov 13, 2025
Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in postcss-development-cosmogenic-mongodb (npm)
- Nov 13, 2025
Malicious code in postcss-babel-centauri-orbit (npm)
- Nov 13, 2025
Malicious code in postcss-ablation-hercules-darkmatter (npm)
- Nov 13, 2025
Malicious code in polaris-winston-cryonics-palynology (npm)
- Nov 13, 2025
Malicious code in polaris-wasat-grunt-puppeteer (npm)
- Nov 13, 2025
Malicious code in polaris-typeorm-carina-solarnebula (npm)
- Nov 13, 2025
Malicious code in polaris-stop-sails-antares (npm)
- Nov 13, 2025
Malicious code in polaris-solarnebula-equinox-heka (npm)
- Nov 13, 2025
Malicious code in polaris-publish-vortex-jekyll (npm)
- Nov 13, 2025
Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo (npm)
- Nov 13, 2025
Malicious code in polaris-parcel-ora-quasar (npm)
Page 303 of 4,809