Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in lithosphere-changelog-grunt-uglify-js (npm)
- Nov 13, 2025
Malicious code in lithosphere-buffer-jwt-prettier (npm)
- Nov 13, 2025
Malicious code in lithosphere-browserify-express-spectron (npm)
- Nov 13, 2025
Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in lint-staged-superagent-eridanus-bionics (npm)
- Nov 13, 2025
Malicious code in lint-staged-reveal-md-electron-convict (npm)
- Nov 13, 2025
Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in lint-staged-javascript-jwt-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in lint-staged-inquirer-transport-hawkingradiation (npm)
- Nov 13, 2025
Malicious code in lint-staged-gemini-aquarius-superagent (npm)
- Nov 13, 2025
Malicious code in lint-remark-meteor-neptune (npm)
- Nov 13, 2025
Malicious code in lint-nuxtjs-babel-socketio (npm)
- Nov 13, 2025
Malicious code in lint-markdownlint-sedimentology-winston (npm)
- Nov 13, 2025
Malicious code in lint-loop-playwright-publish (npm)
- Nov 13, 2025
Malicious code in lint-less-loader-jekyll-virgo (npm)
- Nov 13, 2025
Malicious code in lint-janus-juno-blueshift (npm)
- Nov 13, 2025
Malicious code in lint-isostasy-altair-less-loader (npm)
- Nov 13, 2025
Malicious code in lint-cassini-metalsmith-jupiter (npm)
- Nov 13, 2025
Malicious code in lint-auth0-joviology-jovian (npm)
- Nov 13, 2025
Malicious code in lint-antares-luna-nashira (npm)
- Nov 13, 2025
Malicious code in link-user-awk-bundle-throw (npm)
- Nov 13, 2025
Malicious code in link-upsilon-link-kappa-compress (npm)
- Nov 13, 2025
Malicious code in link-uglify-js-fermiparadox-auth (npm)
- Nov 13, 2025
Malicious code in link-typeorm-nebula-eigenstate (npm)
- Nov 13, 2025
Malicious code in link-theta-float-class-balance (npm)
- Nov 13, 2025
Malicious code in link-slidev-dione-markdown-pdf (npm)
- Nov 13, 2025
Malicious code in link-sedna-paleomagnetism-npm (npm)
- Nov 13, 2025
Malicious code in link-sadr-helios-pulsar (npm)
- Nov 13, 2025
Malicious code in link-loopback-hydrogeology-gacrux (npm)
- Nov 13, 2025
Malicious code in link-leda-odin-fetch (npm)
- Nov 13, 2025
Malicious code in link-emulate-double-table-book (npm)
- Nov 13, 2025
Malicious code in link-cron-simulate-assert-log (npm)
- Nov 13, 2025
Malicious code in link-cold-file-mock-info (npm)
- Nov 13, 2025
Malicious code in link-cat-fork-char-easy (npm)
- Nov 13, 2025
Malicious code in link-astrometry-gulp-transhumanism (npm)
- Nov 13, 2025
Malicious code in lightyear-ichnology-transform-phoebe (npm)
- Nov 13, 2025
Malicious code in lightyear-cors-quasar-procyon (npm)
- Nov 13, 2025
Malicious code in library-volcanology-magnetosphere-foundation (npm)
- Nov 13, 2025
Malicious code in library-update-commitizen-jabbah (npm)
- Nov 13, 2025
Malicious code in library-supernova-eigenstate-juno (npm)
- Nov 13, 2025
Malicious code in library-nebula-rest-local (npm)
- Nov 13, 2025
Malicious code in library-kronos-start-ceres (npm)
- Nov 13, 2025
Malicious code in library-frontend-update-eclipse (npm)
- Nov 13, 2025
Malicious code in library-fetch-hyperion-vortex (npm)
- Nov 13, 2025
Malicious code in library-dotenv-safe-gridsome-singularity (npm)
- Nov 13, 2025
Malicious code in library-capella-tectonic-child-process (npm)
- Nov 13, 2025
Malicious code in library-biosignature-bionics-mocha (npm)
- Nov 13, 2025
Malicious code in library-bellatrix-cli-cors (npm)
- Nov 13, 2025
Malicious code in library-babel-meteor-kronos (npm)
- Nov 13, 2025
Malicious code in library-archaeoastronomy-winston-spica (npm)
Page 327 of 4,814