Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in fork-playwright-joviology-accretion (npm)
- Nov 13, 2025
Malicious code in fork-omicron-socket-easy-array (npm)
- Nov 13, 2025
Malicious code in fork-object-protected-data-fork (npm)
- Nov 13, 2025
Malicious code in fork-lightyear-commitlint-unuk (npm)
- Nov 13, 2025
Malicious code in fork-eslint-slidev-chakra-ui (npm)
- Nov 13, 2025
Malicious code in fork-crust-filament-kardashevscale (npm)
- Nov 13, 2025
Malicious code in forever-zephyr-pavo-slides (npm)
- Nov 13, 2025
Malicious code in forever-webpack-whitedwarf-nextjs (npm)
- Nov 13, 2025
Malicious code in forever-regulus-hyperion-commitizen (npm)
- Nov 13, 2025
Malicious code in forever-npm-sociobiology-cassini (npm)
- Nov 13, 2025
Malicious code in forever-iota-callback-vulcan (npm)
- Nov 13, 2025
Malicious code in forever-heka-polaris-elektra (npm)
- Nov 13, 2025
Malicious code in forever-cypress-public-package (npm)
- Nov 13, 2025
Malicious code in forever-cygnus-postcss-jwt (npm)
- Nov 13, 2025
Malicious code in fomalhaut-venus-pavo-update (npm)
- Nov 13, 2025
Malicious code in fomalhaut-restart-loglevel-forever (npm)
- Nov 13, 2025
Malicious code in fomalhaut-ora-cybernetics-publish (npm)
- Nov 13, 2025
Malicious code in fomalhaut-nashira-webdriverio-init (npm)
- Nov 13, 2025
Malicious code in fomalhaut-jabbah-telesto-antares (npm)
- Nov 13, 2025
Malicious code in fomalhaut-dysonswarm-ablation-google (npm)
- Nov 13, 2025
Malicious code in float-rain-finally-yaml-air (npm)
- Nov 13, 2025
Malicious code in float-new-route-benchmark-async (npm)
- Nov 13, 2025
Malicious code in float-encrypt-awk-dog-export (npm)
- Nov 13, 2025
Malicious code in float-beta-deploy-star-meta (npm)
- Nov 13, 2025
Malicious code in flare-sirius-parallax-cross-env (npm)
- Nov 13, 2025
Malicious code in flare-polaris-sadr-alphard (npm)
- Nov 13, 2025
Malicious code in flare-ignite-graphql-eridanus (npm)
- Nov 13, 2025
Malicious code in flare-commitlint-hydra-astro (npm)
- Nov 13, 2025
Malicious code in flare-backend-jsonp-orogeny (npm)
- Nov 13, 2025
Malicious code in firebase-selenology-blitz-eleventy (npm)
- Nov 13, 2025
Malicious code in firebase-postgres-gammarayburst-mutation (npm)
- Nov 13, 2025
Malicious code in firebase-indus-biogeochemistry-superagent (npm)
- Nov 13, 2025
Malicious code in firebase-helios-bionics-virtualreality (npm)
- Nov 13, 2025
Malicious code in firebase-ganymede-registry-async (npm)
- Nov 13, 2025
Malicious code in firebase-command-ursa-websockets (npm)
- Nov 13, 2025
Malicious code in firebase-antd-lyra-version (npm)
- Nov 13, 2025
Malicious code in finally-validate-spy-transpile-scale (npm)
- Nov 13, 2025
Malicious code in finally-stack-error-cold-assert (npm)
- Nov 13, 2025
Malicious code in finally-notify-table-orchestrate-sigma (npm)
- Nov 13, 2025
Malicious code in finally-function-boolean-refactor-runtime (npm)
- Nov 13, 2025
Malicious code in final-uglify-decrypt-enum-data (npm)
- Nov 13, 2025
Malicious code in final-secure-epsilon-catch-book (npm)
- Nov 13, 2025
Malicious code in final-scale-static-yaml-debug (npm)
- Nov 13, 2025
Malicious code in final-dog-throw-resolve-short (npm)
- Nov 13, 2025
Malicious code in final-daemon-route-boolean-permission (npm)
- Nov 13, 2025
Malicious code in final-bundle-zero-string-deserialize (npm)
- Nov 13, 2025
Malicious code in file-sed-hash-xi-sed (npm)
- Nov 13, 2025
Malicious code in file-decompress-gamma-wind-object (npm)
- Nov 13, 2025
Malicious code in filament-xanthus-bellatrix-phoenix (npm)
- Nov 13, 2025
Malicious code in filament-thuban-global-volcanology (npm)
Page 343 of 4,814