Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,450 total in npm · sorted newest first- Nov 13, 2025
Malicious code in parse-kappa-void-proxy-scale (npm)
- Nov 13, 2025
Malicious code in parse-array-slow-emulate-notify (npm)
- Nov 13, 2025
Malicious code in parse-abstract-beta-rain-benchmark (npm)
- Nov 13, 2025
Malicious code in parcel-planckscale-puppeteer-version (npm)
- Nov 13, 2025
Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)
- Nov 13, 2025
Malicious code in parcel-paleontology-configstore-sails (npm)
- Nov 13, 2025
Malicious code in parcel-non-blocking-bulma-chakra-ui (npm)
- Nov 13, 2025
Malicious code in parcel-google-webdriverio-sails (npm)
- Nov 13, 2025
Malicious code in parcel-farout-webdriver-manager-sails (npm)
- Nov 13, 2025
Malicious code in parallax-speleology-cosmicray-lint (npm)
- Nov 13, 2025
Malicious code in parallax-janus-deimos-warp (npm)
- Nov 13, 2025
Malicious code in parallax-chakra-ui-mantle-inquirer (npm)
- Nov 13, 2025
Malicious code in parallax-chakra-ui-cybernetics-unuk (npm)
- Nov 13, 2025
Malicious code in panspermia-zenobia-cryonics-galaxy (npm)
- Nov 13, 2025
Malicious code in panspermia-winston-phoebe-adonis (npm)
- Nov 13, 2025
Malicious code in panspermia-seismology-yildun-figures (npm)
- Nov 13, 2025
Malicious code in panspermia-panspermia-polaris-charon (npm)
- Nov 13, 2025
Malicious code in panspermia-oscillation-bioinformatics-superflare (npm)
- Nov 13, 2025
Malicious code in panspermia-cygnus-planckscale-supercluster (npm)
- Nov 13, 2025
Malicious code in panspermia-atlas-vortex-chakra-ui (npm)
- Nov 13, 2025
Malicious code in palynology-ultra-biomimicry-markdownlint (npm)
- Nov 13, 2025
Malicious code in palynology-singularity-multiverse-writable (npm)
- Nov 13, 2025
Malicious code in palynology-semantic-release-pulsar-wormhole (npm)
- Nov 13, 2025
Malicious code in palynology-isostasy-protractor-non-blocking (npm)
- Nov 13, 2025
Malicious code in palynology-cybernetics-schema-hapi (npm)
- Nov 13, 2025
Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)
- Nov 13, 2025
Malicious code in paleontology-sublimation-europa-backend (npm)
- Nov 13, 2025
Malicious code in paleontology-sedna-enif-sync (npm)
- Nov 13, 2025
Malicious code in paleontology-saturnology-standard-pipe (npm)
- Nov 13, 2025
Malicious code in paleontology-mensa-altair-exec (npm)
- Nov 13, 2025
Malicious code in paleontology-lyra-hercules-protractor (npm)
- Nov 13, 2025
Malicious code in paleontology-luminescence-less-hermes (npm)
- Nov 13, 2025
Malicious code in paleontology-acamar-steganography-commitlint (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-public-quito-redis (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-process-rigel-ariel (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-playwright-blackhole-izar (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-nightmare-radiant-hologram (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-neptune-jsonp-postgres (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-levels-rocket-dependencies (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-izar-gacrux-kaus (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-dysonswarm-async-remark (npm)
- Nov 13, 2025
Malicious code in paleomagnetism-callisto-areology-exec (npm)
- Nov 13, 2025
Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)
- Nov 13, 2025
Malicious code in paleoecology-tardigrade-express-rocket (npm)
- Nov 13, 2025
Malicious code in paleoecology-stop-javascript-google (npm)
- Nov 13, 2025
Malicious code in paleoecology-cygnus-jovian-telesto (npm)
- Nov 13, 2025
Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)
- Nov 13, 2025
Malicious code in paleoclimatology-sagitta-hydra-geochronology (npm)
- Nov 13, 2025
Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm)
- Nov 13, 2025
Malicious code in paleoclimatology-outercore-neptune-nightmare (npm)
Page 308 of 4,809