Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in helios-zenobia-geckodriver-rigel (npm)
- Nov 13, 2025
Malicious code in helios-webdriver-mocha-superposition-phylogenetics (npm)
- Nov 13, 2025
Malicious code in helios-nightwatch-tethys-eridanus (npm)
- Nov 13, 2025
Malicious code in helios-jekyll-polaris-soap (npm)
- Nov 13, 2025
Malicious code in helios-fusion-rollup-command (npm)
- Nov 13, 2025
Malicious code in helios-epigenetics-asteroid-eclipse (npm)
- Nov 13, 2025
Malicious code in helios-cressida-biogeochemistry-halley (npm)
- Nov 13, 2025
Malicious code in helios-centaurus-juno-lint-staged (npm)
- Nov 13, 2025
Malicious code in heliophysics-pino-umbriel-request (npm)
- Nov 13, 2025
Malicious code in heliophysics-blackhole-ganymede-cluster (npm)
- Nov 13, 2025
Malicious code in heliophysics-aurora-lint-staged-global (npm)
- Nov 13, 2025
Malicious code in heka-zenobia-pyxis-mui (npm)
- Nov 13, 2025
Malicious code in heka-relay-grunt-gammarayburst (npm)
- Nov 13, 2025
Malicious code in heka-puppeteer-phoebe-meteor (npm)
- Nov 13, 2025
Malicious code in heka-neptune-nightwatch-andromeda (npm)
- Nov 13, 2025
Malicious code in heka-mdx-kaus-indus (npm)
- Nov 13, 2025
Malicious code in heka-markdownlint-rollup-node-config (npm)
- Nov 13, 2025
Malicious code in heka-centaurus-nodemon-hydrogeology (npm)
- Nov 13, 2025
Malicious code in heka-buffer-install-transform (npm)
- Nov 13, 2025
Malicious code in heka-buffer-holography-subduction (npm)
- Nov 13, 2025
Malicious code in heka-bootstrap-javascript-loopback (npm)
- Nov 13, 2025
Malicious code in heka-antares-vulcan-commitizen (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-xenobiology-prettier-stylelint-buffer (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-volcanology-npm-delphinus (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-ora-celeste-toml (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-mensa-dotenv-parse-variables-inquirer (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-jupiter-toml-comet (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-jupiter-morgan-equinox (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-flare-hydrogeology-quito (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-eslint-mantle-lyra (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-carina-oortcloud-gammarayburst (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-backend-farout-despina (npm)
- Nov 13, 2025
Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)
- Nov 13, 2025
Malicious code in hash-warn-async-private-shell (npm)
- Nov 13, 2025
Malicious code in hash-uglify-cluster-info-orchestrate (npm)
- Nov 13, 2025
Malicious code in hash-test-interface-emulate-file (npm)
- Nov 13, 2025
Malicious code in hash-table-enum-debug-unix (npm)
- Nov 13, 2025
Malicious code in hash-socket-slow-debug-interpret (npm)
- Nov 13, 2025
Malicious code in hash-char-new-alert-sandbox (npm)
- Nov 13, 2025
Malicious code in hash-authorize-sanitize-signal-cloud (npm)
- Nov 13, 2025
Malicious code in hapi-zenobia-superagent-geodynamo (npm)
- Nov 13, 2025
Malicious code in hapi-zenobia-ophiuchus-quantum (npm)
- Nov 13, 2025
Malicious code in hapi-protoplanetarydisk-halley-aether (npm)
- Nov 13, 2025
Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)
- Nov 13, 2025
Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm)
- Nov 13, 2025
Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)
- Nov 13, 2025
Malicious code in hapi-cross-env-subduction-mongodb (npm)
- Nov 13, 2025
Malicious code in halley-xanthus-aquarius-fornax (npm)
- Nov 13, 2025
Malicious code in halley-unuk-hyperion-sedna (npm)
Page 337 of 4,814