Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in europa-umbriel-solis-apollo (npm)
- Nov 13, 2025
Malicious code in europa-polaris-terraforming-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in europa-lynx-janus-repository (npm)
- Nov 13, 2025
Malicious code in europa-loglevel-levels-async (npm)
- Nov 13, 2025
Malicious code in europa-fork-andromeda-kinetic (npm)
- Nov 13, 2025
Malicious code in europa-betelgeuse-scorpius-envconfig (npm)
- Nov 13, 2025
Malicious code in europa-augmentedreality-redgiant-halley (npm)
- Nov 13, 2025
Malicious code in europa-alphard-electron-gravity (npm)
- Nov 13, 2025
Malicious code in europa-alphard-docusaurus-io (npm)
- Nov 13, 2025
Malicious code in ethology-zephyr-dorado-browserify (npm)
- Nov 13, 2025
Malicious code in ethology-subduction-foundation-elektra (npm)
- Nov 13, 2025
Malicious code in ethology-phoenix-unuk-tailwindcss (npm)
- Nov 13, 2025
Malicious code in ethology-paleontology-nova-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in ethology-ophiuchus-slidev-markdown-pdf (npm)
- Nov 13, 2025
Malicious code in ethology-iota-neuromorphic-neptune (npm)
- Nov 13, 2025
Malicious code in eta-sed-assert-spy-hash (npm)
- Nov 13, 2025
Malicious code in eta-refactor-execute-float-load (npm)
- Nov 13, 2025
Malicious code in eta-psi-await-sun-upsilon (npm)
- Nov 13, 2025
Malicious code in eta-proxy-omicron-theta-sanitize (npm)
- Nov 13, 2025
Malicious code in eslint-webdriverio-mutation-sedna (npm)
- Nov 13, 2025
Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm)
- Nov 13, 2025
Malicious code in eslint-postcss-loader-pm2-cressida (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-weywot-bootes-cypress (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-pyxis-library-style-loader (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-husky-pavo-virgo (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-gacrux-wolf-ariel (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-fornax-auth-dactyl (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-eslint-sails-membrane (npm)
- Nov 13, 2025
Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)
- Nov 13, 2025
Malicious code in eslint-loop-meteor-jasmine (npm)
- Nov 13, 2025
Malicious code in eslint-config-uninstall-mongoose-superflare (npm)
- Nov 13, 2025
Malicious code in eslint-config-sirius-run-script-sublimation (npm)
- Nov 13, 2025
Malicious code in eslint-config-nestjs-deneb-geckodriver (npm)
- Nov 13, 2025
Malicious code in eslint-config-nebula-magnetosphere-vuetify (npm)
- Nov 13, 2025
Malicious code in eslint-config-jovian-middleware-init (npm)
- Nov 13, 2025
Malicious code in eslint-config-geckodriver-algol-middleware (npm)
- Nov 13, 2025
Malicious code in eslint-config-apex-hermes-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in eslint-config-antares-deneb-scorpius (npm)
- Nov 13, 2025
Malicious code in eslint-commitizen-firebase-upgrade (npm)
- Nov 13, 2025
Malicious code in error-validate-refactor-byte-lambda (npm)
- Nov 13, 2025
Malicious code in error-simple-view-public-float (npm)
- Nov 13, 2025
Malicious code in error-signal-minify-zero-index (npm)
- Nov 13, 2025
Malicious code in error-root-long-sigma-interpret (npm)
- Nov 13, 2025
Malicious code in error-fast-class-visualize-new (npm)
- Nov 13, 2025
Malicious code in error-error-authorize-phi-mock (npm)
- Nov 13, 2025
Malicious code in error-bash-monitor-stack-decode (npm)
- Nov 13, 2025
Malicious code in error-alpha-sanitize-sanitize-daemon (npm)
Page 346 of 4,814