Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in mantle-private-mineralogy-morgan (npm)
- Nov 13, 2025
Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)
- Nov 13, 2025
Malicious code in mantle-galaxy-vuetify-pm2 (npm)
- Nov 13, 2025
Malicious code in mantle-asteroid-charon-quasar (npm)
- Nov 13, 2025
Malicious code in mantle-achernar-kinetic-whitedwarf (npm)
- Nov 13, 2025
Malicious code in magnetosphere-quito-isostasy-despina (npm)
- Nov 13, 2025
Malicious code in magnetosphere-procyon-neutronstar-cli (npm)
- Nov 13, 2025
Malicious code in magnetosphere-hydra-aurora-hyperion (npm)
- Nov 13, 2025
Malicious code in magnetosphere-exec-hyperion-spinner (npm)
- Nov 13, 2025
Malicious code in magnetar-thermosphere-nconf-quantum (npm)
- Nov 13, 2025
Malicious code in magnetar-palynology-uranology-blackhole (npm)
- Nov 13, 2025
Malicious code in magnetar-paleoecology-tectonic-yaml (npm)
- Nov 13, 2025
Malicious code in magnetar-geochemistry-remark-repository (npm)
- Nov 13, 2025
Malicious code in magnetar-eridanus-middleware-update (npm)
- Nov 13, 2025
Malicious code in magellan-vega-phoenix-hydrogeology (npm)
- Nov 13, 2025
Malicious code in magellan-transport-auth0-pulsar (npm)
- Nov 13, 2025
Malicious code in magellan-neptunology-extremophile-janus (npm)
- Nov 13, 2025
Malicious code in magellan-hyperion-gridsome-electron-builder (npm)
- Nov 13, 2025
Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in magellan-gammarayburst-passport-antares (npm)
- Nov 13, 2025
Malicious code in magellan-fornax-chai-test (npm)
- Nov 13, 2025
Malicious code in magellan-enif-oauth-sirius (npm)
- Nov 13, 2025
Malicious code in magellan-bootes-resonance-sedna (npm)
- Nov 13, 2025
Malicious code in magellan-blaze-archaeometry-slides (npm)
- Nov 13, 2025
Malicious code in magellan-augmentedreality-webdriver-mocha-blitz (npm)
- Nov 13, 2025
Malicious code in magellan-astro-webdriverio-enceladus (npm)
- Nov 13, 2025
Malicious code in lyra-xanthus-csrf-pm2 (npm)
- Nov 13, 2025
Malicious code in lyra-warp-dactyl-interferometry (npm)
- Nov 13, 2025
Malicious code in lyra-taphonomy-fusion-exosphere (npm)
- Nov 13, 2025
Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in lyra-janus-spectron-rigel (npm)
- Nov 13, 2025
Malicious code in lyra-fomalhaut-arcturus-enceladus (npm)
- Nov 13, 2025
Malicious code in lyra-cryovolcano-mongoose-multiverse (npm)
- Nov 13, 2025
Malicious code in lyra-archaeoastronomy-graviton-altair (npm)
- Nov 13, 2025
Malicious code in lynx-supervisor-relay-loop (npm)
- Nov 13, 2025
Malicious code in lynx-phoebe-alphard-betelgeuse (npm)
- Nov 13, 2025
Malicious code in lynx-nashira-heliophysics-solis (npm)
- Nov 13, 2025
Malicious code in lynx-foundation-astroinformatics-geckodriver (npm)
- Nov 13, 2025
Malicious code in lynx-astrobiology-exobiology-plutology (npm)
- Nov 13, 2025
Malicious code in luna-zephyr-hugo-fusion (npm)
- Nov 13, 2025
Malicious code in luna-xanadu-aquarius-barnard (npm)
- Nov 13, 2025
Malicious code in luna-sequelize-markdown-pdf-meissa (npm)
- Nov 13, 2025
Malicious code in luna-mira-eslint-wezen (npm)
- Nov 13, 2025
Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)
- Nov 13, 2025
Malicious code in luna-cordelia-blackhole-lithosphere (npm)
- Nov 13, 2025
Malicious code in luminescence-pino-superagent-axios (npm)
- Nov 13, 2025
Malicious code in luminescence-meteor-elara-oortcloud (npm)
- Nov 13, 2025
Malicious code in luminescence-colors-resonance-publish (npm)
- Nov 13, 2025
Malicious code in luminescence-chai-cryonics-eclipse (npm)
- Nov 13, 2025
Malicious code in luminescence-achernar-promise-nuxtjs (npm)
Page 325 of 4,814