Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in nextjs-tachyon-apollo-cosmos (npm)
- Nov 13, 2025
Malicious code in nextjs-stratigraphy-stratigraphy-oauth (npm)
- Nov 13, 2025
Malicious code in nextjs-shelljs-centaurus-singularity (npm)
- Nov 13, 2025
Malicious code in nextjs-sagitta-backend-nightwatch (npm)
- Nov 13, 2025
Malicious code in nextjs-radiant-proteomics-neptune (npm)
- Nov 13, 2025
Malicious code in nextjs-quark-supercluster-nebula (npm)
- Nov 13, 2025
Malicious code in nextjs-octans-interferometry-fusion (npm)
- Nov 13, 2025
Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)
- Nov 13, 2025
Malicious code in nextjs-google-transport-markdownlint (npm)
- Nov 13, 2025
Malicious code in nextjs-event-chromedriver-pm2 (npm)
- Nov 13, 2025
Malicious code in new-user-static-awk-zeta (npm)
- Nov 13, 2025
Malicious code in new-transpile-alpha-log-proxy (npm)
- Nov 13, 2025
Malicious code in new-promise-compress-compress-private (npm)
- Nov 13, 2025
Malicious code in new-optimize-async-spy-process (npm)
- Nov 13, 2025
Malicious code in new-mu-sigma-float-visualize (npm)
- Nov 13, 2025
Malicious code in new-decode-process-orchestrate-balance (npm)
- Nov 13, 2025
Malicious code in new-alpha-transpile-air-resolve (npm)
- Nov 13, 2025
Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)
- Nov 13, 2025
Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
- Nov 13, 2025
Malicious code in neutronstar-native-dynamo-hydra (npm)
- Nov 13, 2025
Malicious code in neutronstar-holography-greatfilter-miranda (npm)
- Nov 13, 2025
Malicious code in neutronstar-hologram-volcanology-asteroid (npm)
- Nov 13, 2025
Malicious code in neutronstar-gravity-aether-bulma (npm)
- Nov 13, 2025
Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism (npm)
- Nov 13, 2025
Malicious code in neutrino-thuban-geoarchaeology-sadr (npm)
- Nov 13, 2025
Malicious code in neutrino-radioastronomy-comet-planetology (npm)
- Nov 13, 2025
Malicious code in neuromorphic-venus-aquarius-heka (npm)
- Nov 13, 2025
Malicious code in neuromorphic-nextjs-phenomic-telesto (npm)
- Nov 13, 2025
Malicious code in neuromorphic-cybernetics-cosmogenic-neutronstar (npm)
- Nov 13, 2025
Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)
- Nov 13, 2025
Malicious code in nestjs-postcss-loader-slides-spinner (npm)
- Nov 13, 2025
Malicious code in nestjs-luna-meteor-despina (npm)
- Nov 13, 2025
Malicious code in nestjs-equinox-fomalhaut-mutation (npm)
- Nov 13, 2025
Malicious code in nestjs-css-loader-command-mensa (npm)
- Nov 13, 2025
Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)
- Nov 13, 2025
Malicious code in neptunology-husky-dotenv-parse-variables-got (npm)
- Nov 13, 2025
Malicious code in neptunology-gravity-start-interferometry (npm)
- Nov 13, 2025
Malicious code in neptune-webdriver-manager-vuetify-boson (npm)
- Nov 13, 2025
Malicious code in neptune-venus-foundation-hyperion (npm)
- Nov 13, 2025
Malicious code in neptune-vega-slides-browserify (npm)
- Nov 13, 2025
Malicious code in neptune-terraforming-commitizen-phenomic (npm)
- Nov 13, 2025
Malicious code in neptune-tardigrade-protoplanetarydisk-palynology (npm)
- Nov 13, 2025
Malicious code in neptune-sync-holography-xenobiology (npm)
- Nov 13, 2025
Malicious code in neptune-sqlite-cordelia-cypress (npm)
- Nov 13, 2025
Malicious code in neptune-slidev-pulsar-node-sass (npm)
- Nov 13, 2025
Malicious code in neptune-redshift-semantic-release-xml (npm)
- Nov 13, 2025
Malicious code in neptune-node-sass-altair-membrane (npm)
- Nov 13, 2025
Malicious code in neptune-morgan-pyxis-australis (npm)
- Nov 13, 2025
Malicious code in neptune-middleware-mongoose-neptunology (npm)
- Nov 13, 2025
Malicious code in neptune-lacerta-accretion-meteor (npm)
Page 318 of 4,814