Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in greatfilter-lithosphere-isostasy-rocket (npm)
- Nov 13, 2025
Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm)
- Nov 13, 2025
Malicious code in gravity-wezen-sequelize-fermion (npm)
- Nov 13, 2025
Malicious code in gravity-taurus-superflare-version (npm)
- Nov 13, 2025
Malicious code in gravity-start-triton-oauth (npm)
- Nov 13, 2025
Malicious code in gravity-juno-cors-sirius (npm)
- Nov 13, 2025
Malicious code in gravity-cosmology-lightyear-inquirer (npm)
- Nov 13, 2025
Malicious code in graviton-sociobiology-tailwindcss-rollup (npm)
- Nov 13, 2025
Malicious code in graviton-module-stratigraphy-xanadu (npm)
- Nov 13, 2025
Malicious code in graviton-jest-sirius-vuepress (npm)
- Nov 13, 2025
Malicious code in graviton-hapi-less-loader-electron (npm)
- Nov 13, 2025
Malicious code in graviton-greatfilter-crust-quantum-computing (npm)
- Nov 13, 2025
Malicious code in graviton-command-global-axios (npm)
- Nov 13, 2025
Malicious code in gravitationalwave-transhumanism-repository-cors (npm)
- Nov 13, 2025
Malicious code in graphql-npm-soap-fermiparadox (npm)
- Nov 13, 2025
Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)
- Nov 13, 2025
Malicious code in graphql-karma-cluster-mongodb (npm)
- Nov 13, 2025
Malicious code in graphql-elektra-triton-transform (npm)
- Nov 13, 2025
Malicious code in got-paleoclimatology-nebula-commitizen (npm)
- Nov 13, 2025
Malicious code in got-nightwatch-despina-react-bootstrap (npm)
- Nov 13, 2025
Malicious code in got-lynx-greatfilter-betelgeuse (npm)
- Nov 13, 2025
Malicious code in got-loglevel-ceres-acamar (npm)
- Nov 13, 2025
Malicious code in got-install-blackhole-pipe (npm)
- Nov 13, 2025
Malicious code in got-cosmicweb-canopus-halley (npm)
- Nov 13, 2025
Malicious code in got-callisto-whitedwarf-gammarayburst (npm)
- Nov 13, 2025
Malicious code in google-radiant-weywot-rocket (npm)
- Nov 13, 2025
Malicious code in google-darkmatter-xerxes-europa (npm)
- Nov 13, 2025
Malicious code in google-bionics-flare-biogeochemistry (npm)
- Nov 13, 2025
Malicious code in good-serialize-protected-tau-fast (npm)
- Nov 13, 2025
Malicious code in good-minify-private-container-object (npm)
- Nov 13, 2025
Malicious code in good-cluster-gamma-fast-finally (npm)
- Nov 13, 2025
Malicious code in good-chi-nu-info-hash (npm)
- Nov 13, 2025
Malicious code in good-bundle-scale-grid-load (npm)
- Nov 13, 2025
Malicious code in global-upgrade-wolf-betelgeuse (npm)
- Nov 13, 2025
Malicious code in global-schema-unuk-gemini (npm)
- Nov 13, 2025
Malicious code in global-sadr-polaris-scorpius (npm)
- Nov 13, 2025
Malicious code in global-rollup-plugin-lightyear-thermochronology (npm)
- Nov 13, 2025
Malicious code in global-polaris-spica-iota (npm)
- Nov 13, 2025
Malicious code in global-outercore-superagent-draco (npm)
- Nov 13, 2025
Malicious code in global-mesosphere-extremophile-ablation (npm)
- Nov 13, 2025
Malicious code in global-gridsome-oauth-supervisor (npm)
- Nov 13, 2025
Malicious code in global-eridanus-yakutsk-prompts (npm)
- Nov 13, 2025
Malicious code in global-docusaurus-postcss-ora (npm)
- Nov 13, 2025
Malicious code in global-centauri-jabbah-husky (npm)
- Nov 13, 2025
Malicious code in global-cassini-hexo-flare (npm)
- Nov 13, 2025
Malicious code in global-barnard-protoplanetarydisk-quantum-computing (npm)
- Nov 13, 2025
Malicious code in global-apollo-dysonswarm-nebula (npm)
- Nov 13, 2025
Malicious code in glaciology-wormhole-cz-conventional-changelog-oauth (npm)
- Nov 13, 2025
Malicious code in glaciology-venus-biohacking-dysonswarm (npm)
- Nov 13, 2025
Malicious code in glaciology-nconf-eslint-plugin-farout (npm)
Page 339 of 4,814