Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in neptune-ini-apex-ophiuchus (npm)
- Nov 13, 2025
Malicious code in neptune-indus-tachyon-phoenix (npm)
- Nov 13, 2025
Malicious code in neptune-grus-fusion-sass-loader (npm)
- Nov 13, 2025
Malicious code in neptune-ganymede-thermochronology-got (npm)
- Nov 13, 2025
Malicious code in neptune-framework-cors-ora (npm)
- Nov 13, 2025
Malicious code in neptune-europa-version-thermochronology (npm)
- Nov 13, 2025
Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm)
- Nov 13, 2025
Malicious code in neptune-cryovolcano-dysonswarm-scripts (npm)
- Nov 13, 2025
Malicious code in neptune-betelgeuse-halley-chromedriver (npm)
- Nov 13, 2025
Malicious code in neptune-barnard-mdx-less-loader (npm)
- Nov 13, 2025
Malicious code in neptune-async-karma-repository (npm)
- Nov 13, 2025
Malicious code in neptune-acamar-exobiology-achernar (npm)
- Nov 13, 2025
Malicious code in nebula-polaris-prettier-wormhole (npm)
- Nov 13, 2025
Malicious code in nebula-outercore-promise-lightyear (npm)
- Nov 13, 2025
Malicious code in nebula-lyra-astrophysics-backend (npm)
- Nov 13, 2025
Malicious code in nebula-init-resolvers-frontend (npm)
- Nov 13, 2025
Malicious code in nebula-gulp-bootes-kastra (npm)
- Nov 13, 2025
Malicious code in nebula-foundation-interstellarmedium-neutrino (npm)
- Nov 13, 2025
Malicious code in nebula-fomalhaut-auriga-superagent (npm)
- Nov 13, 2025
Malicious code in nebula-development-less-loader-achernar (npm)
- Nov 13, 2025
Malicious code in nebula-deneb-winston-apex (npm)
- Nov 13, 2025
Malicious code in nebula-delphinus-planckscale-juno (npm)
- Nov 13, 2025
Malicious code in nebula-dactyl-avior-thermosphere (npm)
- Nov 13, 2025
Malicious code in nebula-cosmochemistry-electron-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in nebula-build-auth0-mui (npm)
- Nov 13, 2025
Malicious code in nebula-await-paleoecology-grus (npm)
- Nov 13, 2025
Malicious code in nconf-zenobia-antimatter-changelog (npm)
- Nov 13, 2025
Malicious code in nconf-wavefunction-titan-europa (npm)
- Nov 13, 2025
Malicious code in nconf-superagent-public-writable (npm)
- Nov 13, 2025
Malicious code in nconf-middleware-extremophile-cosmicweb (npm)
- Nov 13, 2025
Malicious code in nconf-markdownlint-archaeometry-superagent (npm)
- Nov 13, 2025
Malicious code in nconf-gemini-webdriver-mocha-forever (npm)
- Nov 13, 2025
Malicious code in nconf-cryptography-paleoanthropology-janus (npm)
- Nov 13, 2025
Malicious code in nconf-aurora-ionosphere-callisto (npm)
- Nov 13, 2025
Malicious code in native-transform-nightmare-polaris (npm)
- Nov 13, 2025
Malicious code in native-thermosphere-hermes-server (npm)
- Nov 13, 2025
Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)
- Nov 13, 2025
Malicious code in native-rate-limiter-uninstall-regulus (npm)
- Nov 13, 2025
Malicious code in native-quasar-middleware-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in native-nashira-seismology-heliophysics (npm)
- Nov 13, 2025
Malicious code in native-izar-hugo-start (npm)
- Nov 13, 2025
Malicious code in native-galaxy-antares-global (npm)
- Nov 13, 2025
Malicious code in native-gacrux-antares-phoenix (npm)
- Nov 13, 2025
Malicious code in native-electron-builder-nashira-tachyon (npm)
- Nov 13, 2025
Malicious code in native-docusaurus-xerxes-unuk (npm)
- Nov 13, 2025
Malicious code in native-coronalmassejection-writable-bionics (npm)
- Nov 13, 2025
Malicious code in native-callback-prettier-magellan (npm)
- Nov 13, 2025
Malicious code in native-blackhole-parcel-node-sass (npm)
- Nov 13, 2025
Malicious code in nashira-winston-aurora-gatsby (npm)
- Nov 13, 2025
Malicious code in nashira-materialize-publish-galaxy (npm)
Page 319 of 4,814