Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in miranda-exec-meissa-terser (npm)
- Nov 13, 2025
Malicious code in miranda-elektra-quark-ophiuchus (npm)
- Nov 13, 2025
Malicious code in miranda-eigenstate-markdownlint-cosmogenic (npm)
- Nov 13, 2025
Malicious code in miranda-despina-sqlite-ultra (npm)
- Nov 13, 2025
Malicious code in miranda-cosmos-resonance-loopback (npm)
- Nov 13, 2025
Malicious code in miranda-borealis-nova-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in miranda-biotechnology-xanadu-halley (npm)
- Nov 13, 2025
Malicious code in mira-wolf-prompts-got (npm)
- Nov 13, 2025
Malicious code in mira-pipe-stratigraphy-semantic-release (npm)
- Nov 13, 2025
Malicious code in mira-pino-impulse-adonis (npm)
- Nov 13, 2025
Malicious code in mira-pegasus-helios-command (npm)
- Nov 13, 2025
Malicious code in mira-halley-halley-publish (npm)
- Nov 13, 2025
Malicious code in mira-fusion-yildun-css-loader (npm)
- Nov 13, 2025
Malicious code in mira-flare-xanadu-pavo (npm)
- Nov 13, 2025
Malicious code in mira-apex-lint-bellatrix (npm)
- Nov 13, 2025
Malicious code in minify-report-compress-compress-process (npm)
- Nov 13, 2025
Malicious code in minify-permission-xi-route-export (npm)
- Nov 13, 2025
Malicious code in minify-mu-catch-authenticate-user (npm)
- Nov 13, 2025
Malicious code in minify-kappa-proxy-kappa-tau (npm)
- Nov 13, 2025
Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa (npm)
- Nov 13, 2025
Malicious code in mini-css-extract-plugin-radiant-axios-sirius (npm)
- Nov 13, 2025
Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)
- Nov 13, 2025
Malicious code in mini-css-extract-plugin-nova-titan-duplex (npm)
- Nov 13, 2025
Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)
- Nov 13, 2025
Malicious code in mineralogy-oauth-eslint-node-sass (npm)
- Nov 13, 2025
Malicious code in mineralogy-less-loader-dagda-global (npm)
- Nov 13, 2025
Malicious code in middleware-webpack-resolvers-capella (npm)
- Nov 13, 2025
Malicious code in middleware-nightwatch-virgo-subscription (npm)
- Nov 13, 2025
Malicious code in middleware-mini-css-extract-plugin-ignite-json (npm)
- Nov 13, 2025
Malicious code in middleware-lyra-transport-innercore (npm)
- Nov 13, 2025
Malicious code in middleware-fusion-gemini-rehype (npm)
- Nov 13, 2025
Malicious code in middleware-exec-callisto-postcss-loader (npm)
- Nov 13, 2025
Malicious code in middleware-css-loader-eigenstate-pavo (npm)
- Nov 13, 2025
Malicious code in middleware-backend-async-oortcloud (npm)
- Nov 13, 2025
Malicious code in middleware-antd-hapi-nightwatch (npm)
- Nov 13, 2025
Malicious code in middleware-antares-bootstrap-fork (npm)
- Nov 13, 2025
Malicious code in meteor-zephyr-singularitarianism-local (npm)
- Nov 13, 2025
Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)
- Nov 13, 2025
Malicious code in meteor-singularitarianism-procyon-nova (npm)
- Nov 13, 2025
Malicious code in meteor-paleoecology-mysql-middleware (npm)
- Nov 13, 2025
Malicious code in meteor-paleoclimatology-firebase-chromedriver (npm)
- Nov 13, 2025
Malicious code in meteor-octans-grunt-kuiperbelt (npm)
- Nov 13, 2025
Malicious code in meteor-meissa-airbnb-outercore (npm)
- Nov 13, 2025
Malicious code in meteor-lacerta-fornax-cryonics (npm)
- Nov 13, 2025
Malicious code in meteor-jupiter-jupiter-xanthus (npm)
- Nov 13, 2025
Malicious code in meteor-hadron-hermes-lint (npm)
- Nov 13, 2025
Malicious code in meteor-geochronology-element-ui-polaris (npm)
- Nov 13, 2025
Malicious code in meteor-fermiparadox-pino-mysql (npm)
- Nov 13, 2025
Malicious code in meteor-envconfig-quito-singularitarianism (npm)
Page 322 of 4,814