Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,657 total in npm · sorted newest first- Nov 13, 2025
Malicious code in fusion-writable-redgiant-neptunology (npm)
- Nov 13, 2025
Malicious code in fusion-steganography-tachyon-exobiology (npm)
- Nov 13, 2025
Malicious code in fusion-publish-query-auth0 (npm)
- Nov 13, 2025
Malicious code in fusion-proxima-miranda-eslint-config (npm)
- Nov 13, 2025
Malicious code in fusion-postcss-loader-supercluster-biohacking (npm)
- Nov 13, 2025
Malicious code in fusion-nextjs-iota-materialize (npm)
- Nov 13, 2025
Malicious code in fusion-inflation-dactyl-webpack (npm)
- Nov 13, 2025
Malicious code in fusion-gravity-css-loader-perseus (npm)
- Nov 13, 2025
Malicious code in fusion-gammarayburst-magnetosphere-child-process (npm)
- Nov 13, 2025
Malicious code in fusion-farout-centaurus-metabolomics (npm)
- Nov 13, 2025
Malicious code in fusion-eigenstate-install-tethys (npm)
- Nov 13, 2025
Malicious code in fusion-astrometry-speleology-sedimentology (npm)
- Nov 13, 2025
Malicious code in fusion-ablation-cygnus-parsec (npm)
- Nov 13, 2025
Malicious code in function-iota-sanitize-view-old (npm)
- Nov 13, 2025
Malicious code in function-finally-beta-fast-deploy (npm)
- Nov 13, 2025
Malicious code in function-fast-error-private-orchestrate (npm)
- Nov 13, 2025
Malicious code in function-bundle-log-validate-grid (npm)
- Nov 13, 2025
Malicious code in function-assert-orchestrate-theta-cloud (npm)
- Nov 13, 2025
Malicious code in frontend-uninstall-foundation-prettier (npm)
- Nov 13, 2025
Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)
- Nov 13, 2025
Malicious code in frontend-inquirer-webdriverio-cryonics (npm)
- Nov 13, 2025
Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)
- Nov 13, 2025
Malicious code in framework-umbriel-mongoose-magellan (npm)
- Nov 13, 2025
Malicious code in framework-triton-string-farout (npm)
- Nov 13, 2025
Malicious code in framework-rimraf-buffer-csrf (npm)
- Nov 13, 2025
Malicious code in framework-release-it-fornax-non-blocking (npm)
- Nov 13, 2025
Malicious code in framework-orbit-query-kardashevscale (npm)
- Nov 13, 2025
Malicious code in framework-bellatrix-await-unuk (npm)
- Nov 13, 2025
Malicious code in framework-baryon-install-iota (npm)
- Nov 13, 2025
Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in foundation-rigel-pm2-foundation (npm)
- Nov 13, 2025
Malicious code in foundation-node-config-farout-bunyan (npm)
- Nov 13, 2025
Malicious code in foundation-await-pavo-chariklo (npm)
- Nov 13, 2025
Malicious code in fornax-transport-webdriver-manager-carpo (npm)
- Nov 13, 2025
Malicious code in fornax-socketio-ganymede-boson (npm)
- Nov 13, 2025
Malicious code in fornax-postgres-phoenix-semantic-ui (npm)
- Nov 13, 2025
Malicious code in fornax-phoebe-jabbah-xo (npm)
- Nov 13, 2025
Malicious code in fornax-materialize-sails-dactyl (npm)
- Nov 13, 2025
Malicious code in fornax-local-gemini-zenith (npm)
- Nov 13, 2025
Malicious code in fornax-library-eslint-javascript (npm)
- Nov 13, 2025
Malicious code in fornax-jest-ariel-spica (npm)
- Nov 13, 2025
Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in fornax-chariklo-sass-loader-parsec (npm)
- Nov 13, 2025
Malicious code in fornax-castor-saturnology-soap (npm)
- Nov 13, 2025
Malicious code in fornax-acamar-photon-futurology (npm)
- Nov 13, 2025
Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)
- Nov 13, 2025
Malicious code in fork-winston-apollo-yaml (npm)
- Nov 13, 2025
Malicious code in fork-webpack-kastra-chai (npm)
- Nov 13, 2025
Malicious code in fork-secure-code-daemon-abstract (npm)
- Nov 13, 2025
Malicious code in fork-playwright-joviology-accretion (npm)
Page 342 of 4,814