Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in phoebe-global-google-yakutsk (npm)
- Nov 13, 2025
Malicious code in phoebe-cosmicweb-meteor-install (npm)
- Nov 13, 2025
Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)
- Nov 13, 2025
Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)
- Nov 13, 2025
Malicious code in phoebe-betelgeuse-sadr-miranda (npm)
- Nov 13, 2025
Malicious code in phi-void-long-reject-import (npm)
- Nov 13, 2025
Malicious code in phi-transpile-delta-table-unix (npm)
- Nov 13, 2025
Malicious code in phi-shell-old-old-pi (npm)
- Nov 13, 2025
Malicious code in phi-secure-deploy-air-finally (npm)
- Nov 13, 2025
Malicious code in phi-private-async-earth-xi (npm)
- Nov 13, 2025
Malicious code in phenomic-terser-markdown-archaeogenetics (npm)
- Nov 13, 2025
Malicious code in phenomic-superposition-publish-fomalhaut (npm)
- Nov 13, 2025
Malicious code in phenomic-resolvers-node-config-postgres (npm)
- Nov 13, 2025
Malicious code in phenomic-prettier-stylelint-development-library (npm)
- Nov 13, 2025
Malicious code in phenomic-paleoclimatology-slidev-websockets (npm)
- Nov 13, 2025
Malicious code in phenomic-metalsmith-neptune-fornax (npm)
- Nov 13, 2025
Malicious code in phenomic-mesosphere-multiverse-paleoecology (npm)
- Nov 13, 2025
Malicious code in phenomic-loopback-rigel-mechatronics (npm)
- Nov 13, 2025
Malicious code in phenomic-got-norma-gravity (npm)
- Nov 13, 2025
Malicious code in phenomic-google-antares-quark (npm)
- Nov 13, 2025
Malicious code in phenomic-gemini-adonis-neptune (npm)
- Nov 13, 2025
Malicious code in phenomic-avior-greatfilter-boson (npm)
- Nov 13, 2025
Malicious code in petrology-supercluster-relay-jasmine (npm)
- Nov 13, 2025
Malicious code in petrology-prettier-sirius-norma (npm)
- Nov 13, 2025
Malicious code in petrology-module-australis-apex (npm)
- Nov 13, 2025
Malicious code in petrology-galaxy-paleoecology-crust (npm)
- Nov 13, 2025
Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)
- Nov 13, 2025
Malicious code in perturbation-technosignature-pino-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in perturbation-stratigraphy-eslint-plugin-fusion (npm)
- Nov 13, 2025
Malicious code in perturbation-nextjs-singularity-gravitationalwave (npm)
- Nov 13, 2025
Malicious code in perturbation-css-loader-loopback-uninstall (npm)
- Nov 13, 2025
Malicious code in perturbation-coronalmassejection-terser-ganymede (npm)
- Nov 13, 2025
Malicious code in perturbation-bulma-mensa-eventhoriz (npm)
- Nov 13, 2025
Malicious code in perturbation-blaze-singularity-hermes (npm)
- Nov 13, 2025
Malicious code in perseus-xenon-grus-polaris (npm)
- Nov 13, 2025
Malicious code in perseus-websockets-wasat-hydra (npm)
- Nov 13, 2025
Malicious code in perseus-vuepress-hydra-backend (npm)
- Nov 13, 2025
Malicious code in perseus-tectonophysics-iota-xenobiology (npm)
- Nov 13, 2025
Malicious code in perseus-subscription-quito-uranology (npm)
- Nov 13, 2025
Malicious code in perseus-selenium-lepton-ganymede (npm)
- Nov 13, 2025
Malicious code in perseus-query-halley-selenology (npm)
- Nov 13, 2025
Malicious code in perseus-orbit-iota-aquarius (npm)
- Nov 13, 2025
Malicious code in perseus-odin-neptune-cli (npm)
- Nov 13, 2025
Malicious code in perseus-metalsmith-acamar-iota (npm)
- Nov 13, 2025
Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)
- Nov 13, 2025
Malicious code in perseus-hermes-polaris-event (npm)
- Nov 13, 2025
Malicious code in perseus-global-meissa-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in perseus-geoarchaeology-husky-changelog (npm)
- Nov 13, 2025
Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)
- Nov 13, 2025
Malicious code in perseus-cosmogenic-spectron-webdriver-meissa (npm)
Page 310 of 4,814