Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in meteor-dysonswarm-geckodriver-grus (npm)
- Nov 13, 2025
Malicious code in meteor-deneb-phoebe-paleoanthropology (npm)
- Nov 13, 2025
Malicious code in meteor-cosmochemistry-parsec-wezen (npm)
- Nov 13, 2025
Malicious code in meteor-command-warp-colors (npm)
- Nov 13, 2025
Malicious code in meteor-cli-nightwatch-test (npm)
- Nov 13, 2025
Malicious code in meteor-chalk-blueshift-gulp (npm)
- Nov 13, 2025
Malicious code in meteor-cache-fomalhaut-winston (npm)
- Nov 13, 2025
Malicious code in meteor-bulma-augmentedreality-hexo (npm)
- Nov 13, 2025
Malicious code in meteor-bionics-schema-flare (npm)
- Nov 13, 2025
Malicious code in meteor-betelgeuse-eigenstate-cladistics (npm)
- Nov 13, 2025
Malicious code in meteor-australis-filament-andromeda (npm)
- Nov 13, 2025
Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)
- Nov 13, 2025
Malicious code in metalsmith-postcss-loader-magellan-test (npm)
- Nov 13, 2025
Malicious code in metalsmith-json-husky-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)
- Nov 13, 2025
Malicious code in metalsmith-eslint-plugin-proxima-update (npm)
- Nov 13, 2025
Malicious code in metalsmith-antares-barnard-yildun (npm)
- Nov 13, 2025
Malicious code in metabolomics-steganography-palynology-deneb (npm)
- Nov 13, 2025
Malicious code in metabolomics-octans-soap-membrane (npm)
- Nov 13, 2025
Malicious code in metabolomics-cross-env-antares-run-script (npm)
- Nov 13, 2025
Malicious code in meta-monitor-info-import-final (npm)
- Nov 13, 2025
Malicious code in meta-load-thread-grep-decompress (npm)
- Nov 13, 2025
Malicious code in meta-grep-stack-serialize-authenticate (npm)
- Nov 13, 2025
Malicious code in meta-fire-validate-refactor-cache (npm)
- Nov 13, 2025
Malicious code in meta-code-debug-key-old (npm)
- Nov 13, 2025
Malicious code in meta-boolean-analyze-decode-cloud (npm)
- Nov 13, 2025
Malicious code in mesosphere-query-dynamo-uranology (npm)
- Nov 13, 2025
Malicious code in mesosphere-private-farout-boson (npm)
- Nov 13, 2025
Malicious code in mesosphere-planckscale-quark-promise (npm)
- Nov 13, 2025
Malicious code in mesosphere-nanotechnology-got-scorpius (npm)
- Nov 13, 2025
Malicious code in mesosphere-kinetic-ignite-tectonic (npm)
- Nov 13, 2025
Malicious code in mesosphere-jupiter-sirius-spinner (npm)
- Nov 13, 2025
Malicious code in mesosphere-innercore-transport-proteomics (npm)
- Nov 13, 2025
Malicious code in mesosphere-genomics-oscillation-mechatronics (npm)
- Nov 13, 2025
Malicious code in mesosphere-exobiology-sedna-baryon (npm)
- Nov 13, 2025
Malicious code in mesosphere-chai-hermes-eris (npm)
- Nov 13, 2025
Malicious code in mesosphere-bootes-primatology-levels (npm)
- Nov 13, 2025
Malicious code in mesosphere-achernar-paleontology-deneb (npm)
- Nov 13, 2025
Malicious code in mensa-subscription-antares-csv (npm)
- Nov 13, 2025
Malicious code in mensa-spectron-webdriver-prettier-stylelint-zenobia (npm)
- Nov 13, 2025
Malicious code in mensa-nightwatch-magnetosphere-oberon (npm)
- Nov 13, 2025
Malicious code in mensa-koa-castor-typeorm (npm)
- Nov 13, 2025
Malicious code in mensa-fornax-chariklo-geochemistry (npm)
- Nov 13, 2025
Malicious code in membrane-kuiperbelt-cluster-remark (npm)
- Nov 13, 2025
Malicious code in membrane-genomics-passport-pulsar (npm)
- Nov 13, 2025
Malicious code in meissa-steganography-helmet-yaml (npm)
- Nov 13, 2025
Malicious code in meissa-polaris-pulsar-stop (npm)
- Nov 13, 2025
Malicious code in meissa-perseus-eslint-europa (npm)
- Nov 13, 2025
Malicious code in meissa-pavo-asthenosphere-aurora (npm)
- Nov 13, 2025
Malicious code in meissa-optimize-css-assets-webpack-plugin-express-lint-staged (npm)
Page 323 of 4,814