Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in json-apex-bellatrix-docusaurus (npm)
- Nov 13, 2025
Malicious code in joviology-standard-iota-outercore (npm)
- Nov 13, 2025
Malicious code in joviology-nuxtjs-ursa-lacerta (npm)
- Nov 13, 2025
Malicious code in joviology-mocha-cluster-redshift (npm)
- Nov 13, 2025
Malicious code in joviology-heka-accretion-speleology (npm)
- Nov 13, 2025
Malicious code in joviology-exobiology-antares-webpack (npm)
- Nov 13, 2025
Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm)
- Nov 13, 2025
Malicious code in jovian-sass-loader-native-cassini (npm)
- Nov 13, 2025
Malicious code in jovian-postgres-webdriver-mocha-await (npm)
- Nov 13, 2025
Malicious code in jovian-nodemon-winston-andromeda (npm)
- Nov 13, 2025
Malicious code in jovian-less-loader-draco-wasat (npm)
- Nov 13, 2025
Malicious code in jovian-development-meissa-configstore (npm)
- Nov 13, 2025
Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm)
- Nov 13, 2025
Malicious code in jest-titan-postcss-loader-galaxy (npm)
- Nov 13, 2025
Malicious code in jest-astro-despina-aurora (npm)
- Nov 13, 2025
Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in jekyll-resolvers-quark-xenobiology (npm)
- Nov 13, 2025
Malicious code in jekyll-resolvers-quark-epimetheus (npm)
- Nov 13, 2025
Malicious code in jekyll-nightmare-juno-eclipse (npm)
- Nov 13, 2025
Malicious code in jekyll-less-npm-local (npm)
- Nov 13, 2025
Malicious code in jekyll-deneb-uglify-js-paleobotany (npm)
- Nov 13, 2025
Malicious code in javascript-start-halley-eclipse (npm)
- Nov 13, 2025
Malicious code in javascript-magnetar-epimetheus-figures (npm)
- Nov 13, 2025
Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm)
- Nov 13, 2025
Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm)
- Nov 13, 2025
Malicious code in javascript-async-enceladus-eslint-plugin (npm)
- Nov 13, 2025
Malicious code in java-theta-theta-zero-static (npm)
- Nov 13, 2025
Malicious code in java-socket-cluster-decode-catch (npm)
- Nov 13, 2025
Malicious code in java-simple-void-fork-sudo (npm)
- Nov 13, 2025
Malicious code in java-short-string-java-yaml (npm)
- Nov 13, 2025
Malicious code in java-orchestrate-awk-process-virtualize (npm)
- Nov 13, 2025
Malicious code in jasmine-metalsmith-schema-sirius (npm)
- Nov 13, 2025
Malicious code in jasmine-karma-innercore-csrf (npm)
- Nov 13, 2025
Malicious code in jasmine-iota-apollo-postcss (npm)
- Nov 13, 2025
Malicious code in jasmine-ichnology-astro-proteomics (npm)
- Nov 13, 2025
Malicious code in jasmine-cypress-gravity-install (npm)
- Nov 13, 2025
Malicious code in janus-sedimentology-higgs-biohacking (npm)
- Nov 13, 2025
Malicious code in janus-rocket-crust-xerxes (npm)
- Nov 13, 2025
Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)
- Nov 13, 2025
Malicious code in janus-repository-acamar-jekyll (npm)
- Nov 13, 2025
Malicious code in janus-remark-thuban-sails (npm)
- Nov 13, 2025
Malicious code in janus-regulus-eclipse-castor (npm)
- Nov 13, 2025
Malicious code in janus-radiant-avior-quito (npm)
- Nov 13, 2025
Malicious code in janus-proxima-commitizen-auriga (npm)
- Nov 13, 2025
Malicious code in janus-petrology-sedimentology-polaris (npm)
- Nov 13, 2025
Malicious code in janus-neptune-spectron-publish (npm)
- Nov 13, 2025
Malicious code in janus-mysql-delphinus-convict (npm)
- Nov 13, 2025
Malicious code in janus-hapi-ganymede-solis (npm)
- Nov 13, 2025
Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)
- Nov 13, 2025
Malicious code in janus-fomalhaut-rate-limiter-fusion (npm)
Page 331 of 4,814