Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in janus-enif-tardigrade-test (npm)
- Nov 13, 2025
Malicious code in janus-enceladus-supernova-panspermia (npm)
- Nov 13, 2025
Malicious code in janus-dagda-query-ceres (npm)
- Nov 13, 2025
Malicious code in janus-chai-umbriel-install (npm)
- Nov 13, 2025
Malicious code in janus-centaurus-mutation-koa (npm)
- Nov 13, 2025
Malicious code in janus-avior-superagent-ichnology (npm)
- Nov 13, 2025
Malicious code in janus-aldebaran-middleware-paleontology (npm)
- Nov 13, 2025
Malicious code in jabbah-umbriel-io-soap (npm)
- Nov 13, 2025
Malicious code in jabbah-titan-eslint-config-equinox (npm)
- Nov 13, 2025
Malicious code in jabbah-pegasus-umbriel-perseus (npm)
- Nov 13, 2025
Malicious code in jabbah-colors-parsec-chromedriver (npm)
- Nov 13, 2025
Malicious code in jabbah-blitz-kardashevscale-markdown (npm)
- Nov 13, 2025
Malicious code in jabbah-areology-archaeometry-vega (npm)
- Nov 13, 2025
Malicious code in izar-string-command-neutronstar (npm)
- Nov 13, 2025
Malicious code in izar-ora-exec-genomics (npm)
- Nov 13, 2025
Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm)
- Nov 13, 2025
Malicious code in isostasy-slides-augmentedreality-jabbah (npm)
- Nov 13, 2025
Malicious code in isostasy-rate-limiter-miranda-chalk (npm)
- Nov 13, 2025
Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm)
- Nov 13, 2025
Malicious code in isostasy-meteor-passport-npm (npm)
- Nov 13, 2025
Malicious code in isostasy-loopback-docusaurus-inflation (npm)
- Nov 13, 2025
Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm)
- Nov 13, 2025
Malicious code in iota-zephyr-nova-octans (npm)
- Nov 13, 2025
Malicious code in iota-virtualize-alert-mu-cache (npm)
- Nov 13, 2025
Malicious code in iota-stub-wind-quick-promise (npm)
- Nov 13, 2025
Malicious code in iota-simulate-optimize-tree-bundle (npm)
- Nov 13, 2025
Malicious code in iota-sedna-public-webdriver-mocha (npm)
- Nov 13, 2025
Malicious code in iota-scripts-phoebe-geckodriver (npm)
- Nov 13, 2025
Malicious code in iota-report-phi-good-public (npm)
- Nov 13, 2025
Malicious code in iota-release-it-stream-xenos (npm)
- Nov 13, 2025
Malicious code in iota-levels-foundation-solis (npm)
- Nov 13, 2025
Malicious code in iota-less-loader-commitlint-config-angular-private (npm)
- Nov 13, 2025
Malicious code in iota-hydra-eridanus-protractor (npm)
- Nov 13, 2025
Malicious code in iota-hugo-mongoose-hapi (npm)
- Nov 13, 2025
Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)
- Nov 13, 2025
Malicious code in iota-framework-umbra-uranology (npm)
- Nov 13, 2025
Malicious code in iota-centaurus-blackhole-cosmicray (npm)
- Nov 13, 2025
Malicious code in iota-betelgeuse-rest-sass-loader (npm)
- Nov 13, 2025
Malicious code in iota-bash-bundle-delta-encrypt (npm)
- Nov 13, 2025
Malicious code in iota-analyze-transpile-iota-abstract (npm)
- Nov 13, 2025
Malicious code in iota-aether-hawkingradiation-augmentedreality (npm)
- Nov 13, 2025
Malicious code in ionosphere-webdriverio-module-primatology (npm)
- Nov 13, 2025
Malicious code in ionosphere-triton-selenium-janus (npm)
- Nov 13, 2025
Malicious code in ionosphere-terraforming-string-exosphere (npm)
- Nov 13, 2025
Malicious code in ionosphere-tachyon-arcturus-jasmine (npm)
- Nov 13, 2025
Malicious code in io-radiant-kinetic-betelgeuse (npm)
- Nov 13, 2025
Malicious code in io-quark-babel-centaurus (npm)
- Nov 13, 2025
Malicious code in io-publish-antd-outercore (npm)
- Nov 13, 2025
Malicious code in io-octans-taurus-sedna (npm)
- Nov 13, 2025
Malicious code in io-mutation-eslint-izar (npm)
Page 332 of 4,814