Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in permission-permission-link-monitor-web (npm)
- Nov 13, 2025
Malicious code in permission-index-zero-visualize-private (npm)
- Nov 13, 2025
Malicious code in permission-eta-float-gamma-psi (npm)
- Nov 13, 2025
Malicious code in permission-emulate-cloud-beta-stub (npm)
- Nov 13, 2025
Malicious code in permission-big-omega-alert-phi (npm)
- Nov 13, 2025
Malicious code in pegasus-xo-charon-karma (npm)
- Nov 13, 2025
Malicious code in pegasus-toml-neptune-nightwatch (npm)
- Nov 13, 2025
Malicious code in pegasus-shelljs-public-seismology (npm)
- Nov 13, 2025
Malicious code in pegasus-scripts-antd-antares (npm)
- Nov 13, 2025
Malicious code in pegasus-resolvers-leda-mechatronics (npm)
- Nov 13, 2025
Malicious code in pegasus-radiant-sedna-juno (npm)
- Nov 13, 2025
Malicious code in pegasus-quasar-oscillation-titan (npm)
- Nov 13, 2025
Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)
- Nov 13, 2025
Malicious code in pegasus-parcel-gravity-cassini (npm)
- Nov 13, 2025
Malicious code in pegasus-nightwatch-nconf-selenium (npm)
- Nov 13, 2025
Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint (npm)
- Nov 13, 2025
Malicious code in pegasus-mui-dactyl-terser (npm)
- Nov 13, 2025
Malicious code in pegasus-mdx-pino-izar (npm)
- Nov 13, 2025
Malicious code in pegasus-kinetic-betelgeuse-selenium (npm)
- Nov 13, 2025
Malicious code in pegasus-hermes-greatfilter-procyon (npm)
- Nov 13, 2025
Malicious code in pegasus-filament-meteor-impulse (npm)
- Nov 13, 2025
Malicious code in pegasus-deneb-iota-mira (npm)
- Nov 13, 2025
Malicious code in pegasus-cache-passport-vortex (npm)
- Nov 13, 2025
Malicious code in pavo-xenon-markdownlint-enceladus (npm)
- Nov 13, 2025
Malicious code in pavo-paleoecology-pavo-kaus (npm)
- Nov 13, 2025
Malicious code in pavo-helmet-titan-kinetic (npm)
- Nov 13, 2025
Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)
- Nov 13, 2025
Malicious code in pavo-colors-taurus-eslint-plugin (npm)
- Nov 13, 2025
Malicious code in pavo-auth-sedna-polaris (npm)
- Nov 13, 2025
Malicious code in pavo-auriga-jest-apollo (npm)
- Nov 13, 2025
Malicious code in passport-wasat-javascript-link (npm)
- Nov 13, 2025
Malicious code in passport-sirius-solis-quantum-computing (npm)
- Nov 13, 2025
Malicious code in passport-semantic-ui-miranda-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in passport-selenium-terser-webpack-plugin-juno (npm)
- Nov 13, 2025
Malicious code in passport-scripts-blitz-antd (npm)
- Nov 13, 2025
Malicious code in passport-pino-library-schema (npm)
- Nov 13, 2025
Malicious code in passport-nightwatch-sedna-karma (npm)
- Nov 13, 2025
Malicious code in passport-magnetosphere-sociobiology-ichnology (npm)
- Nov 13, 2025
Malicious code in passport-fornax-phenomic-helmet (npm)
- Nov 13, 2025
Malicious code in passport-deimos-isostasy-izar (npm)
- Nov 13, 2025
Malicious code in passport-coronalmassejection-vulcan-loop (npm)
- Nov 13, 2025
Malicious code in passport-auth0-levels-biomimicry (npm)
- Nov 13, 2025
Malicious code in parsec-wormhole-futurology-ablation (npm)
- Nov 13, 2025
Malicious code in parsec-pulsar-areology-airbnb (npm)
- Nov 13, 2025
Malicious code in parsec-oauth-jsonp-eslint-config (npm)
- Nov 13, 2025
Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)
- Nov 13, 2025
Malicious code in parsec-build-nconf-miranda (npm)
- Nov 13, 2025
Malicious code in parsec-barnard-indus-vuepress (npm)
- Nov 13, 2025
Malicious code in parse-rho-wind-compress-simple (npm)
- Nov 13, 2025
Malicious code in parse-key-lambda-new-socket (npm)
Page 307 of 4,809