Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in easy-link-authorize-simple-view (npm)
- Nov 13, 2025
Malicious code in easy-kernel-deserialize-public-await (npm)
- Nov 13, 2025
Malicious code in easy-interpret-big-proxy-scale (npm)
- Nov 13, 2025
Malicious code in easy-emulate-try-psi-balance (npm)
- Nov 13, 2025
Malicious code in easy-cron-secure-thread-sanitize (npm)
- Nov 13, 2025
Malicious code in earth-visualize-abstract-beta-pipe (npm)
- Nov 13, 2025
Malicious code in earth-small-scale-simulate-static (npm)
- Nov 13, 2025
Malicious code in earth-protected-gamma-test-star (npm)
- Nov 13, 2025
Malicious code in earth-omega-epsilon-error-compress (npm)
- Nov 13, 2025
Malicious code in dysonswarm-public-mutation-sagitta (npm)
- Nov 13, 2025
Malicious code in dysonswarm-loop-command-uranology (npm)
- Nov 13, 2025
Malicious code in dysonswarm-lacerta-unuk-dynamo (npm)
- Nov 13, 2025
Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)
- Nov 13, 2025
Malicious code in dysonswarm-gulp-dendrochronology-iota (npm)
- Nov 13, 2025
Malicious code in dysonswarm-apex-graphql-module (npm)
- Nov 13, 2025
Malicious code in dynamo-sirius-changelog-string (npm)
- Nov 13, 2025
Malicious code in dynamo-schema-higgs-geoarchaeology (npm)
- Nov 13, 2025
Malicious code in dynamo-run-script-jasmine-kuiperbelt (npm)
- Nov 13, 2025
Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm)
- Nov 13, 2025
Malicious code in dynamo-leda-registry-unuk (npm)
- Nov 13, 2025
Malicious code in dynamo-ganymede-init-sequelize (npm)
- Nov 13, 2025
Malicious code in duplex-version-polaris-cosmos (npm)
- Nov 13, 2025
Malicious code in duplex-tailwindcss-nestjs-polaris (npm)
- Nov 13, 2025
Malicious code in duplex-request-astrometry-titan (npm)
- Nov 13, 2025
Malicious code in duplex-parcel-nodejs-membrane (npm)
- Nov 13, 2025
Malicious code in duplex-lacerta-link-pipe (npm)
- Nov 13, 2025
Malicious code in duplex-init-parcel-test (npm)
- Nov 13, 2025
Malicious code in duplex-eslint-plugin-apex-taphonomy (npm)
- Nov 13, 2025
Malicious code in duplex-airbnb-canopus-gammarayburst (npm)
- Nov 13, 2025
Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)
- Nov 13, 2025
Malicious code in draco-quasarjet-envconfig-technocracy (npm)
- Nov 13, 2025
Malicious code in draco-less-polaris-miranda (npm)
- Nov 13, 2025
Malicious code in draco-hermes-betelgeuse-auth0 (npm)
- Nov 13, 2025
Malicious code in draco-gacrux-carpo-await (npm)
- Nov 13, 2025
Malicious code in draco-cygnus-repository-aurora (npm)
- Nov 13, 2025
Malicious code in draco-convict-carina-superagent (npm)
- Nov 13, 2025
Malicious code in double-uglify-long-static-cron (npm)
- Nov 13, 2025
Malicious code in double-rain-protected-import-monitor (npm)
- Nov 13, 2025
Malicious code in double-grid-resolve-data-log (npm)
- Nov 13, 2025
Malicious code in double-final-proxy-gamma-alpha (npm)
- Nov 13, 2025
Malicious code in double-file-encode-moon-virtualize (npm)
- Nov 13, 2025
Malicious code in double-decode-encrypt-cache-bundle (npm)
- Nov 13, 2025
Malicious code in double-benchmark-pipe-hash-virtualize (npm)
- Nov 13, 2025
Malicious code in dotenv-semantic-ui-fusion-hexo (npm)
- Nov 13, 2025
Malicious code in dotenv-sedna-inflation-figures (npm)
- Nov 13, 2025
Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)
- Nov 13, 2025
Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm)
- Nov 13, 2025
Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)
- Nov 13, 2025
Malicious code in dotenv-safe-parsec-soap-polaris (npm)
- Nov 13, 2025
Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm)
Page 350 of 4,814