Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in halley-subduction-zephyr-paleoclimatology (npm)
- Nov 13, 2025
Malicious code in halley-resolvers-quantum-neptunology (npm)
- Nov 13, 2025
Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in halley-paleoceanography-mui-callisto (npm)
- Nov 13, 2025
Malicious code in halley-fusion-parcel-node-sass (npm)
- Nov 13, 2025
Malicious code in halley-eigenstate-baryon-gatsby (npm)
- Nov 13, 2025
Malicious code in halley-blueshift-sagitta-restart (npm)
- Nov 13, 2025
Malicious code in halley-bioinformatics-mui-venus (npm)
- Nov 13, 2025
Malicious code in halley-antares-lint-staged-protractor (npm)
- Nov 13, 2025
Malicious code in halley-andromeda-elektra-supernova (npm)
- Nov 13, 2025
Malicious code in hadron-vuetify-astrophysics-prompts (npm)
- Nov 13, 2025
Malicious code in hadron-postgres-phylogenetics-loop (npm)
- Nov 13, 2025
Malicious code in hadron-pino-pretty-hermes-jabbah (npm)
- Nov 13, 2025
Malicious code in hadron-hyperion-tailwindcss-tectonophysics (npm)
- Nov 13, 2025
Malicious code in gulp-yildun-lacerta-webpack (npm)
- Nov 13, 2025
Malicious code in gulp-rollup-plugin-carina-csv (npm)
- Nov 13, 2025
Malicious code in gulp-prettier-spinner-parallax (npm)
- Nov 13, 2025
Malicious code in gulp-parcel-bioinformatics-halley (npm)
- Nov 13, 2025
Malicious code in gulp-oberon-husky-start (npm)
- Nov 13, 2025
Malicious code in gulp-kinetic-mongodb-astrometry (npm)
- Nov 13, 2025
Malicious code in gulp-javascript-carpo-markdown-pdf (npm)
- Nov 13, 2025
Malicious code in gulp-cluster-hermes-backend (npm)
- Nov 13, 2025
Malicious code in grus-superposition-pegasus-antd (npm)
- Nov 13, 2025
Malicious code in grus-schema-odin-library (npm)
- Nov 13, 2025
Malicious code in grus-prosthetics-stream-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in grus-private-quark-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in grus-pipe-websockets-grunt (npm)
- Nov 13, 2025
Malicious code in grus-nodemon-rehype-hermes (npm)
- Nov 13, 2025
Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm)
- Nov 13, 2025
Malicious code in grus-eslint-enif-test (npm)
- Nov 13, 2025
Malicious code in grus-crust-greatfilter-holography (npm)
- Nov 13, 2025
Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)
- Nov 13, 2025
Malicious code in grunt-bellatrix-less-sirius (npm)
- Nov 13, 2025
Malicious code in gridsome-slides-pipe-socketio (npm)
- Nov 13, 2025
Malicious code in gridsome-procyon-karma-callback (npm)
- Nov 13, 2025
Malicious code in gridsome-planckscale-primatology-speleology (npm)
- Nov 13, 2025
Malicious code in gridsome-interstellarmedium-private-meteor (npm)
- Nov 13, 2025
Malicious code in gridsome-enceladus-aldebaran-auth0 (npm)
- Nov 13, 2025
Malicious code in gridsome-andromeda-algol-exoplanetology (npm)
- Nov 13, 2025
Malicious code in grid-mu-cloud-signal-cat (npm)
- Nov 13, 2025
Malicious code in grep-zero-sigma-log-big (npm)
- Nov 13, 2025
Malicious code in grep-pi-final-interpret-cloud (npm)
- Nov 13, 2025
Malicious code in grep-fire-throw-web-sed (npm)
- Nov 13, 2025
Malicious code in grep-emulate-module-assert-chi (npm)
- Nov 13, 2025
Malicious code in grep-dog-function-stub-tree (npm)
- Nov 13, 2025
Malicious code in grep-cron-thread-grep-short (npm)
- Nov 13, 2025
Malicious code in greatfilter-venus-stream-halley (npm)
- Nov 13, 2025
Malicious code in greatfilter-repository-on-proxima (npm)
- Nov 13, 2025
Malicious code in greatfilter-process-mutation-crust (npm)
- Nov 13, 2025
Malicious code in greatfilter-nova-morgan-private (npm)
Page 338 of 4,814