Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in filament-tethys-brane-upgrade (npm)
- Nov 13, 2025
Malicious code in filament-axios-node-config-jasmine (npm)
- Nov 13, 2025
Malicious code in figures-proxima-sedna-envconfig (npm)
- Nov 13, 2025
Malicious code in figures-miranda-helmet-exec (npm)
- Nov 13, 2025
Malicious code in figures-middleware-proxima-jabbah (npm)
- Nov 13, 2025
Malicious code in figures-materialize-markdown-pdf-miranda (npm)
- Nov 13, 2025
Malicious code in figures-mantle-docusaurus-promise (npm)
- Nov 13, 2025
Malicious code in figures-elara-lithosphere-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in figures-duplex-magnetar-await (npm)
- Nov 13, 2025
Malicious code in figures-duplex-halley-vuetify (npm)
- Nov 13, 2025
Malicious code in figures-betelgeuse-ethology-magellan (npm)
- Nov 13, 2025
Malicious code in figures-archaeoastronomy-hadron-enif (npm)
- Nov 13, 2025
Malicious code in fetch-ursa-vega-grus (npm)
- Nov 13, 2025
Malicious code in fetch-readable-spectron-convict (npm)
- Nov 13, 2025
Malicious code in fetch-charon-callisto-meissa (npm)
- Nov 13, 2025
Malicious code in fetch-blackhole-framework-apollo (npm)
- Nov 13, 2025
Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm)
- Nov 13, 2025
Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)
- Nov 13, 2025
Malicious code in fermiparadox-helios-pyxis-astrometry (npm)
- Nov 13, 2025
Malicious code in fermiparadox-graviton-brane-membrane (npm)
- Nov 13, 2025
Malicious code in fermion-thermosphere-hawkingradiation-astrophysics (npm)
- Nov 13, 2025
Malicious code in fermion-solis-wezen-browserify (npm)
- Nov 13, 2025
Malicious code in fermion-graphql-dorado-lynx (npm)
- Nov 13, 2025
Malicious code in fermion-geochronology-quito-janus (npm)
- Nov 13, 2025
Malicious code in fast-table-import-async-double (npm)
- Nov 13, 2025
Malicious code in fast-sudo-fire-chi-authenticate (npm)
- Nov 13, 2025
Malicious code in fast-stack-tau-execute-hash (npm)
- Nov 13, 2025
Malicious code in fast-java-stub-void-bash (npm)
- Nov 13, 2025
Malicious code in fast-catch-notify-epsilon-new (npm)
- Nov 13, 2025
Malicious code in farout-resolvers-photon-blazar (npm)
- Nov 13, 2025
Malicious code in farout-quark-joviology-nodejs (npm)
- Nov 13, 2025
Malicious code in farout-mongoose-process-kronos (npm)
- Nov 13, 2025
Malicious code in farout-hydrogeology-juno-browserify (npm)
- Nov 13, 2025
Malicious code in farout-gatsby-install-ganymede (npm)
- Nov 13, 2025
Malicious code in farout-enceladus-magellan-nova (npm)
- Nov 13, 2025
Malicious code in farout-convict-meteor-accretion (npm)
- Nov 13, 2025
Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)
- Nov 13, 2025
Malicious code in extremophile-slidev-radioastronomy-coronalmassejection (npm)
- Nov 13, 2025
Malicious code in extremophile-ophiuchus-rollup-plugin-subscription (npm)
- Nov 13, 2025
Malicious code in extremophile-geochemistry-dendrochronology-ursa (npm)
- Nov 13, 2025
Malicious code in extremophile-fornax-quasar-carpo (npm)
- Nov 13, 2025
Malicious code in express-terraforming-nucleosynthesis-nova (npm)
- Nov 13, 2025
Malicious code in express-superflare-antares-loopback (npm)
- Nov 13, 2025
Malicious code in express-standard-development-astrometry (npm)
- Nov 13, 2025
Malicious code in express-proxima-websockets-leda (npm)
- Nov 13, 2025
Malicious code in express-cors-dysonswarm-async (npm)
- Nov 13, 2025
Malicious code in express-buffer-quasar-reveal-md (npm)
- Nov 13, 2025
Malicious code in export-zero-orchestrate-zero-compile (npm)
- Nov 13, 2025
Malicious code in export-resolve-theta-slow-refactor (npm)
- Nov 13, 2025
Malicious code in export-psi-zeta-upsilon-balance (npm)
Page 344 of 4,814