Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)
- Nov 13, 2025
Malicious code in envconfig-apollo-dependencies-update (npm)
- Nov 13, 2025
Malicious code in enum-small-tau-sun-orchestrate (npm)
- Nov 13, 2025
Malicious code in enum-report-char-rho-alpha (npm)
- Nov 13, 2025
Malicious code in enum-proxy-sun-omicron-nu (npm)
- Nov 13, 2025
Malicious code in enum-parse-protected-kernel-refactor (npm)
- Nov 13, 2025
Malicious code in enum-new-encode-tree-cluster (npm)
- Nov 13, 2025
Malicious code in enum-interface-grep-reject-debug (npm)
- Nov 13, 2025
Malicious code in enum-compress-proxy-thread-user (npm)
- Nov 13, 2025
Malicious code in entanglement-xanthus-lithosphere-lightyear (npm)
- Nov 13, 2025
Malicious code in entanglement-tachyon-puppeteer-cressida (npm)
- Nov 13, 2025
Malicious code in entanglement-pino-lint-innercore (npm)
- Nov 13, 2025
Malicious code in entanglement-levels-leda-quasar (npm)
- Nov 13, 2025
Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)
- Nov 13, 2025
Malicious code in entanglement-greatfilter-void-callback (npm)
- Nov 13, 2025
Malicious code in entanglement-cybernetics-process-capella (npm)
- Nov 13, 2025
Malicious code in entanglement-australis-event-leda (npm)
- Nov 13, 2025
Malicious code in enif-zooarchaeology-jovian-extremophile (npm)
- Nov 13, 2025
Malicious code in enif-wavefunction-phoebe-kastra (npm)
- Nov 13, 2025
Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)
- Nov 13, 2025
Malicious code in enif-jsonp-abiogenesis-kardashevscale (npm)
- Nov 13, 2025
Malicious code in enif-frontend-carpo-galaxy (npm)
- Nov 13, 2025
Malicious code in enif-europa-lint-staged-equinox (npm)
- Nov 13, 2025
Malicious code in enif-ceres-request-npm (npm)
- Nov 13, 2025
Malicious code in enif-blitz-selenium-sedna (npm)
- Nov 13, 2025
Malicious code in enif-axios-schema-biotechnology (npm)
- Nov 13, 2025
Malicious code in encrypt-public-delta-chi-query (npm)
- Nov 13, 2025
Malicious code in encrypt-meta-authenticate-log-string (npm)
- Nov 13, 2025
Malicious code in encrypt-link-alert-grep-moon (npm)
- Nov 13, 2025
Malicious code in encrypt-cloud-boolean-double-mock (npm)
- Nov 13, 2025
Malicious code in encrypt-bundle-test-deploy-scale (npm)
- Nov 13, 2025
Malicious code in encode-route-deserialize-eta-export (npm)
- Nov 13, 2025
Malicious code in encode-rain-refactor-execute-pi (npm)
- Nov 13, 2025
Malicious code in encode-promise-cold-awk-easy (npm)
- Nov 13, 2025
Malicious code in enceladus-sirius-radioastronomy-octans (npm)
- Nov 13, 2025
Malicious code in enceladus-shelljs-cryonics-betelgeuse (npm)
- Nov 13, 2025
Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)
- Nov 13, 2025
Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in enceladus-module-firebase-quantum (npm)
- Nov 13, 2025
Malicious code in enceladus-mdx-zenobia-blazar (npm)
- Nov 13, 2025
Malicious code in enceladus-got-ultra-centauri (npm)
- Nov 13, 2025
Malicious code in enceladus-eslint-config-readable-cosmogenic (npm)
- Nov 13, 2025
Malicious code in enceladus-blitz-lynx-corvus (npm)
- Nov 13, 2025
Malicious code in enceladus-bionics-pulsar-izar (npm)
- Nov 13, 2025
Malicious code in emulate-wind-sudo-object-class (npm)
- Nov 13, 2025
Malicious code in emulate-throw-root-meta-file (npm)
- Nov 13, 2025
Malicious code in emulate-tau-grep-resolve-decompress (npm)
- Nov 13, 2025
Malicious code in emulate-sudo-query-balance-air (npm)
- Nov 13, 2025
Malicious code in emulate-signal-psi-void-root (npm)
- Nov 13, 2025
Malicious code in emulate-private-alpha-decompress-view (npm)
Page 348 of 4,814