Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in kastra-oberon-spectroscopy-mocha (npm)
- Nov 13, 2025
Malicious code in karma-update-slidev-websockets (npm)
- Nov 13, 2025
Malicious code in karma-spectron-parcel-aether (npm)
- Nov 13, 2025
Malicious code in karma-remark-meissa-quasarjet (npm)
- Nov 13, 2025
Malicious code in karma-install-spectron-bootes (npm)
- Nov 13, 2025
Malicious code in karma-cross-env-mocha-grus (npm)
- Nov 13, 2025
Malicious code in kardashevscale-transport-tailwindcss-dynamo (npm)
- Nov 13, 2025
Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)
- Nov 13, 2025
Malicious code in kardashevscale-despina-outercore-leda (npm)
- Nov 13, 2025
Malicious code in kardashevscale-apex-neptunology-astrometry (npm)
- Nov 13, 2025
Malicious code in kappa-pi-nu-beta-lambda (npm)
- Nov 13, 2025
Malicious code in kappa-nu-daemon-async-bad (npm)
- Nov 13, 2025
Malicious code in kappa-notify-web-encrypt-iota (npm)
- Nov 13, 2025
Malicious code in kappa-lambda-bundle-omega-bad (npm)
- Nov 13, 2025
Malicious code in kappa-eta-theta-sandbox-user (npm)
- Nov 13, 2025
Malicious code in kappa-encrypt-public-rho-boolean (npm)
- Nov 13, 2025
Malicious code in kappa-debug-lambda-daemon-upsilon (npm)
- Nov 13, 2025
Malicious code in kappa-cache-process-byte-sudo (npm)
- Nov 13, 2025
Malicious code in kappa-awk-deploy-simulate-encrypt (npm)
- Nov 13, 2025
Malicious code in jwt-ursa-apollo-fornax (npm)
- Nov 13, 2025
Malicious code in jwt-sync-ora-selenium (npm)
- Nov 13, 2025
Malicious code in jwt-superagent-astrobiology-solarnebula (npm)
- Nov 13, 2025
Malicious code in jwt-rest-jest-pm2 (npm)
- Nov 13, 2025
Malicious code in jwt-polaris-accretion-transform (npm)
- Nov 13, 2025
Malicious code in jwt-mutation-dagda-octans (npm)
- Nov 13, 2025
Malicious code in jwt-jwt-nodejs-publish (npm)
- Nov 13, 2025
Malicious code in jwt-firebase-izar-gulp (npm)
- Nov 13, 2025
Malicious code in jwt-antares-chakra-ui-andromeda (npm)
- Nov 13, 2025
Malicious code in justmeteai (npm)
- Nov 13, 2025
Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm)
- Nov 13, 2025
Malicious code in jupiter-fork-axios-magellan (npm)
- Nov 13, 2025
Malicious code in jupiter-aether-markdown-pdf-websockets (npm)
- Nov 13, 2025
Malicious code in juno-uglify-js-tethys-thermochronology (npm)
- Nov 13, 2025
Malicious code in juno-saturnology-sass-loader-joviology (npm)
- Nov 13, 2025
Malicious code in juno-pyxis-barnard-perturbation (npm)
- Nov 13, 2025
Malicious code in juno-proxima-wolf-tailwindcss (npm)
- Nov 13, 2025
Malicious code in juno-ichnology-dotenv-safe-javascript (npm)
- Nov 13, 2025
Malicious code in juno-ganymede-inquirer-ultra (npm)
- Nov 13, 2025
Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm)
- Nov 13, 2025
Malicious code in juno-areology-dorado-webdriver-mocha (npm)
- Nov 13, 2025
Malicious code in jsonp-lacerta-eris-octans (npm)
- Nov 13, 2025
Malicious code in jsonp-hydra-neuromorphic-void (npm)
- Nov 13, 2025
Malicious code in json-superagent-helios-ablation (npm)
- Nov 13, 2025
Malicious code in json-stream-aquarius-cygnus (npm)
- Nov 13, 2025
Malicious code in json-protractor-nestjs-auth0 (npm)
- Nov 13, 2025
Malicious code in json-miranda-karma-auth0 (npm)
- Nov 13, 2025
Malicious code in json-geochemistry-exec-publish (npm)
- Nov 13, 2025
Malicious code in json-docusaurus-terser-aurora (npm)
- Nov 13, 2025
Malicious code in json-babel-regulus-void (npm)
- Nov 13, 2025
Malicious code in json-apollo-rate-limiter-cross-env (npm)
Page 330 of 4,814