Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in export-hot-cold-orchestrate-awk (npm)
- Nov 13, 2025
Malicious code in export-decompress-integer-encrypt-void (npm)
- Nov 13, 2025
Malicious code in export-bad-compress-fork-compress (npm)
- Nov 13, 2025
Malicious code in exosphere-troposphere-grus-cluster (npm)
- Nov 13, 2025
Malicious code in exosphere-scripts-halley-upgrade (npm)
- Nov 13, 2025
Malicious code in exosphere-rate-limiter-transhumanism-chariklo (npm)
- Nov 13, 2025
Malicious code in exosphere-innercore-radiant-cladistics (npm)
- Nov 13, 2025
Malicious code in exosphere-galaxy-planckscale-umbra (npm)
- Nov 13, 2025
Malicious code in exoplanetology-superflare-webdriver-manager-ablation (npm)
- Nov 13, 2025
Malicious code in exoplanetology-link-commitlint-prosthetics (npm)
- Nov 13, 2025
Malicious code in exoplanetology-grus-mdx-comet (npm)
- Nov 13, 2025
Malicious code in exoplanetology-eslint-config-eslint-plugin-elara (npm)
- Nov 13, 2025
Malicious code in exoplanetology-command-heka-mensa (npm)
- Nov 13, 2025
Malicious code in exoplanetology-comet-mira-query (npm)
- Nov 13, 2025
Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)
- Nov 13, 2025
Malicious code in exoplanet-titan-repository-release-it (npm)
- Nov 13, 2025
Malicious code in exoplanet-string-bulma-tardigrade (npm)
- Nov 13, 2025
Malicious code in exoplanet-scripts-webpack-neptune (npm)
- Nov 13, 2025
Malicious code in exoplanet-izar-superposition-style-loader (npm)
- Nov 13, 2025
Malicious code in exoplanet-genomics-thermosphere-phoebe (npm)
- Nov 13, 2025
Malicious code in exoplanet-boson-readable-grunt (npm)
- Nov 13, 2025
Malicious code in exobiology-mesosphere-warp-spectron (npm)
- Nov 13, 2025
Malicious code in exobiology-chalk-xml-atlas (npm)
- Nov 13, 2025
Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)
- Nov 13, 2025
Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)
- Nov 13, 2025
Malicious code in execute-long-pipe-file-encode (npm)
- Nov 13, 2025
Malicious code in execute-java-short-cluster-bundle (npm)
- Nov 13, 2025
Malicious code in execute-char-char-stub-serialize (npm)
- Nov 13, 2025
Malicious code in exec-zephyr-xo-izar (npm)
- Nov 13, 2025
Malicious code in exec-virtualreality-wolf-paleoecology (npm)
- Nov 13, 2025
Malicious code in exec-supernova-soap-mongoose (npm)
- Nov 13, 2025
Malicious code in exec-radiometric-aether-juno (npm)
- Nov 13, 2025
Malicious code in exec-proxima-ophiuchus-exec (npm)
- Nov 13, 2025
Malicious code in exec-mira-puppeteer-warp (npm)
- Nov 13, 2025
Malicious code in exec-markdown-avior-sirius (npm)
- Nov 13, 2025
Malicious code in exec-local-mongoose-dione (npm)
- Nov 13, 2025
Malicious code in exec-dactyl-halley-phoebe (npm)
- Nov 13, 2025
Malicious code in exec-antimatter-jovian-postgres (npm)
- Nov 13, 2025
Malicious code in eventhoriz-yonder-heliophysics-spawn (npm)
- Nov 13, 2025
Malicious code in eventhoriz-stratosphere-polaris-library (npm)
- Nov 13, 2025
Malicious code in eventhoriz-perseus-semantic-ui-antares (npm)
- Nov 13, 2025
Malicious code in eventhoriz-native-planckscale-cosmochemistry (npm)
- Nov 13, 2025
Malicious code in eventhoriz-futurology-event-chariklo (npm)
- Nov 13, 2025
Malicious code in eventhoriz-event-planckscale-sirius (npm)
- Nov 13, 2025
Malicious code in eventhoriz-ariel-atlas-lacerta (npm)
- Nov 13, 2025
Malicious code in event-miranda-rest-semantic-release (npm)
- Nov 13, 2025
Malicious code in event-husky-tachyon-auth0 (npm)
- Nov 13, 2025
Malicious code in event-bootes-dotenv-parse-variables-ursa (npm)
- Nov 13, 2025
Malicious code in event-biogeochemistry-blitz-eris (npm)
- Nov 13, 2025
Malicious code in europa-ursa-tectonophysics-steganography (npm)
Page 345 of 4,814