Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in pipe-oortcloud-void-volcanology (npm)
- Nov 13, 2025
Malicious code in pipe-grid-byte-old-array (npm)
- Nov 13, 2025
Malicious code in pipe-got-filament-xenon (npm)
- Nov 13, 2025
Malicious code in pipe-final-tree-emulate-byte (npm)
- Nov 13, 2025
Malicious code in pipe-cz-conventional-changelog-meissa-canopus (npm)
- Nov 13, 2025
Malicious code in pipe-cloud-try-assert-grid (npm)
- Nov 13, 2025
Malicious code in pipe-byte-spy-fork-notify (npm)
- Nov 13, 2025
Malicious code in pipe-auth0-barnard-tool (npm)
- Nov 13, 2025
Malicious code in pipe-astrophysics-astroinformatics-callisto (npm)
- Nov 13, 2025
Malicious code in pino-virtualreality-cluster-tool (npm)
- Nov 13, 2025
Malicious code in pino-remark-string-nestjs (npm)
- Nov 13, 2025
Malicious code in pino-pretty-yildun-express-graphql (npm)
- Nov 13, 2025
Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm)
- Nov 13, 2025
Malicious code in pino-pretty-radiant-less-loader-galaxy (npm)
- Nov 13, 2025
Malicious code in pino-pretty-prettier-sequelize-figures (npm)
- Nov 13, 2025
Malicious code in pino-pretty-phenomic-quasar-meteor (npm)
- Nov 13, 2025
Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)
- Nov 13, 2025
Malicious code in pino-pretty-exosphere-cosmology-rate-limiter (npm)
- Nov 13, 2025
Malicious code in pino-pretty-electron-palynology-bootes (npm)
- Nov 13, 2025
Malicious code in pino-pretty-ariel-ursa-query (npm)
- Nov 13, 2025
Malicious code in pino-loopback-private-phenomic (npm)
- Nov 13, 2025
Malicious code in pino-cygnus-eris-odin (npm)
- Nov 13, 2025
Malicious code in pino-avior-nightwatch-betelgeuse (npm)
- Nov 13, 2025
Malicious code in pi-validate-water-test-tau (npm)
- Nov 13, 2025
Malicious code in pi-quick-cron-book-compile (npm)
- Nov 13, 2025
Malicious code in pi-permission-debug-decrypt-slow (npm)
- Nov 13, 2025
Malicious code in pi-emulate-lambda-alert-sandbox (npm)
- Nov 13, 2025
Malicious code in pi-compress-grid-class-fast (npm)
- Nov 13, 2025
Malicious code in pi-authenticate-cold-encrypt-alert (npm)
- Nov 13, 2025
Malicious code in phylogenetics-fork-tectonic-cosmology (npm)
- Nov 13, 2025
Malicious code in phylogenetics-elektra-mocha-cosmogenic (npm)
- Nov 13, 2025
Malicious code in photon-transhumanism-cosmicray-neptune (npm)
- Nov 13, 2025
Malicious code in photon-sqlite-package-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in photon-sedna-hugo-palynology (npm)
- Nov 13, 2025
Malicious code in photon-darkenergy-mocha-terraforming (npm)
- Nov 13, 2025
Malicious code in photon-airbnb-virgo-websockets (npm)
- Nov 13, 2025
Malicious code in phoenix-perseus-mocha-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in phoenix-nova-pulsar-rigel (npm)
- Nov 13, 2025
Malicious code in phoenix-eleventy-io-radiant (npm)
- Nov 13, 2025
Malicious code in phoenix-cache-dione-package (npm)
- Nov 13, 2025
Malicious code in phoenix-apollo-nextjs-nova (npm)
- Nov 13, 2025
Malicious code in phoebe-yildun-gravity-meissa (npm)
- Nov 13, 2025
Malicious code in phoebe-tectonophysics-nestjs-dependencies (npm)
- Nov 13, 2025
Malicious code in phoebe-taurus-xerxes-quantum (npm)
- Nov 13, 2025
Malicious code in phoebe-stop-mongoose-gatsby (npm)
- Nov 13, 2025
Malicious code in phoebe-sagitta-cosmiconfig-got (npm)
- Nov 13, 2025
Malicious code in phoebe-react-bootstrap-heliophysics-nebula (npm)
- Nov 13, 2025
Malicious code in phoebe-petrology-sirius-fermiparadox (npm)
- Nov 13, 2025
Malicious code in phoebe-magnetar-biogeochemistry-vulcan (npm)
- Nov 13, 2025
Malicious code in phoebe-holography-deimos-json (npm)
Page 309 of 4,814