Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in meissa-markdown-iota-vortex (npm)
- Nov 13, 2025
Malicious code in meissa-hermes-callisto-sails (npm)
- Nov 13, 2025
Malicious code in meissa-gemini-jupiter-heliophysics (npm)
- Nov 13, 2025
Malicious code in meissa-foundation-plutology-async (npm)
- Nov 13, 2025
Malicious code in meissa-ethology-centauri-fork (npm)
- Nov 13, 2025
Malicious code in meissa-duplex-request-install (npm)
- Nov 13, 2025
Malicious code in meissa-avior-singularity-dione (npm)
- Nov 13, 2025
Malicious code in mechatronics-xenos-fomalhaut-antimatter (npm)
- Nov 13, 2025
Malicious code in mechatronics-quantum-jekyll-jabbah (npm)
- Nov 13, 2025
Malicious code in mechatronics-helmet-auth-xo (npm)
- Nov 13, 2025
Malicious code in mechatronics-deneb-bunyan-radiant (npm)
- Nov 13, 2025
Malicious code in mechatronics-boson-quasarjet-wolf (npm)
- Nov 13, 2025
Malicious code in mechatronics-borealis-tardigrade-init (npm)
- Nov 13, 2025
Malicious code in mechatronics-augmentedreality-hapi-jupiter (npm)
- Nov 13, 2025
Malicious code in mechatronics-arcturus-puppeteer-capella (npm)
- Nov 13, 2025
Malicious code in mdx-zenobia-altair-colors (npm)
- Nov 13, 2025
Malicious code in mdx-resonance-cryonics-geochemistry (npm)
- Nov 13, 2025
Malicious code in mdx-kaus-browserify-deimos (npm)
- Nov 13, 2025
Malicious code in mdx-hyperion-taurus-antimatter (npm)
- Nov 13, 2025
Malicious code in mdx-development-elara-stratosphere (npm)
- Nov 13, 2025
Malicious code in mdx-coronalmassejection-tardigrade-paleobotany (npm)
- Nov 13, 2025
Malicious code in mdx-cluster-oberon-terser (npm)
- Nov 13, 2025
Malicious code in mdx-callisto-multiverse-achernar (npm)
- Nov 13, 2025
Malicious code in materialize-stop-quasar-outercore (npm)
- Nov 13, 2025
Malicious code in materialize-repository-dione-aquarius (npm)
- Nov 13, 2025
Malicious code in materialize-prosthetics-petrology-resonance (npm)
- Nov 13, 2025
Malicious code in materialize-pegasus-typeorm-ursa (npm)
- Nov 13, 2025
Malicious code in materialize-magnetar-paleontology-cosmochemistry (npm)
- Nov 13, 2025
Malicious code in materialize-framework-electron-builder-enceladus (npm)
- Nov 13, 2025
Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)
- Nov 13, 2025
Malicious code in materialize-docusaurus-oauth-centaurus (npm)
- Nov 13, 2025
Malicious code in materialize-cache-neptune-cosmogenic (npm)
- Nov 13, 2025
Malicious code in markdownlint-subscription-changelog-socketio (npm)
- Nov 13, 2025
Malicious code in markdownlint-rollup-loglevel-toml (npm)
- Nov 13, 2025
Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)
- Nov 13, 2025
Malicious code in markdown-proxima-markdown-geckodriver (npm)
- Nov 13, 2025
Malicious code in markdown-prettier-frontend-avior (npm)
- Nov 13, 2025
Malicious code in markdown-pdf-mdx-build-config (npm)
- Nov 13, 2025
Malicious code in markdown-pdf-jsonp-brane-cross-env (npm)
- Nov 13, 2025
Malicious code in markdown-pdf-draco-kuiperbelt-tethys (npm)
- Nov 13, 2025
Malicious code in markdown-pdf-boson-magnetosphere-paleontology (npm)
- Nov 13, 2025
Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in markdown-paleontology-antares-quantum (npm)
- Nov 13, 2025
Malicious code in markdown-nconf-string-xerxes (npm)
- Nov 13, 2025
Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm)
- Nov 13, 2025
Malicious code in markdown-less-loader-joviology-fetch (npm)
- Nov 13, 2025
Malicious code in markdown-electron-europa-markdownlint (npm)
- Nov 13, 2025
Malicious code in markdown-dotenv-whitedwarf-decoherence (npm)
- Nov 13, 2025
Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)
- Nov 13, 2025
Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)
Page 324 of 4,814