Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in gatsby-enif-tachyon-prosthetics (npm)
- Nov 13, 2025
Malicious code in gatsby-config-postgres-concurrently (npm)
- Nov 13, 2025
Malicious code in gatsby-await-palynology-version (npm)
- Nov 13, 2025
Malicious code in gatsby-apollo-sync-lyra (npm)
- Nov 13, 2025
Malicious code in ganymede-webdriver-manager-convict-equinox (npm)
- Nov 13, 2025
Malicious code in ganymede-warp-astrochemistry-jabbah (npm)
- Nov 13, 2025
Malicious code in ganymede-volcanology-meteor-andromeda (npm)
- Nov 13, 2025
Malicious code in ganymede-tethys-jwt-halley (npm)
- Nov 13, 2025
Malicious code in ganymede-style-loader-xanthus-javascript (npm)
- Nov 13, 2025
Malicious code in ganymede-server-test-warp (npm)
- Nov 13, 2025
Malicious code in ganymede-sass-loader-dagda-husky (npm)
- Nov 13, 2025
Malicious code in ganymede-publish-development-janus (npm)
- Nov 13, 2025
Malicious code in ganymede-public-canopus-hydra (npm)
- Nov 13, 2025
Malicious code in ganymede-pegasus-xenobiology-pino (npm)
- Nov 13, 2025
Malicious code in ganymede-palynology-proxima-robotics (npm)
- Nov 13, 2025
Malicious code in ganymede-nestjs-izar-release-it (npm)
- Nov 13, 2025
Malicious code in ganymede-meteor-equinox-iota (npm)
- Nov 13, 2025
Malicious code in ganymede-metabolomics-cryptography-metalsmith (npm)
- Nov 13, 2025
Malicious code in ganymede-mesosphere-nconf-local (npm)
- Nov 13, 2025
Malicious code in ganymede-levels-changelog-norma (npm)
- Nov 13, 2025
Malicious code in ganymede-flare-aurora-membrane (npm)
- Nov 13, 2025
Malicious code in gammarayburst-venus-tectonophysics-colors (npm)
- Nov 13, 2025
Malicious code in gammarayburst-technocracy-janus-eslint-plugin (npm)
- Nov 13, 2025
Malicious code in gammarayburst-semantic-ui-antares-juno (npm)
- Nov 13, 2025
Malicious code in gammarayburst-remark-boson-halley (npm)
- Nov 13, 2025
Malicious code in gammarayburst-quasarjet-radiometric-lyra (npm)
- Nov 13, 2025
Malicious code in gammarayburst-neptunology-helios-kaus (npm)
- Nov 13, 2025
Malicious code in gamma-stack-fire-async-abstract (npm)
- Nov 13, 2025
Malicious code in gamma-old-visualize-web-view (npm)
- Nov 13, 2025
Malicious code in gamma-integer-hash-double-tau (npm)
- Nov 13, 2025
Malicious code in gamma-good-socket-enum-route (npm)
- Nov 13, 2025
Malicious code in gamma-char-visualize-moon-daemon (npm)
- Nov 13, 2025
Malicious code in galaxy-xanthus-perseus-subscription (npm)
- Nov 13, 2025
Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)
- Nov 13, 2025
Malicious code in galaxy-blueshift-astrometry-quantumfoam (npm)
- Nov 13, 2025
Malicious code in galaxy-bellatrix-quito-kastra (npm)
- Nov 13, 2025
Malicious code in gacrux-supercluster-superposition-fomalhaut (npm)
- Nov 13, 2025
Malicious code in gacrux-magellan-cluster-version (npm)
- Nov 13, 2025
Malicious code in gacrux-figures-postcss-fornax (npm)
- Nov 13, 2025
Malicious code in gacrux-farout-publish-barnard (npm)
- Nov 13, 2025
Malicious code in gacrux-dorado-impulse-test (npm)
- Nov 13, 2025
Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)
- Nov 13, 2025
Malicious code in futurology-unuk-config-stop (npm)
- Nov 13, 2025
Malicious code in futurology-taurus-celeste-css-loader (npm)
- Nov 13, 2025
Malicious code in futurology-quantum-mysql-forever (npm)
- Nov 13, 2025
Malicious code in futurology-jsonp-process-fornax (npm)
- Nov 13, 2025
Malicious code in futurology-fermiparadox-parsec-publish (npm)
- Nov 13, 2025
Malicious code in futurology-cladistics-paleoanthropology-test (npm)
- Nov 13, 2025
Malicious code in futurology-aurora-express-graviton (npm)
- Nov 13, 2025
Malicious code in futurology-arcturus-saturnology-leda (npm)
Page 341 of 4,814