Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in development-antares-xerxes-membrane (npm)
- Nov 13, 2025
Malicious code in despina-winston-query-higgs (npm)
- Nov 13, 2025
Malicious code in despina-publish-spectron-webdriver-dotenv-safe (npm)
- Nov 13, 2025
Malicious code in despina-photon-nodejs-on (npm)
- Nov 13, 2025
Malicious code in despina-lightyear-yakutsk-jwt (npm)
- Nov 13, 2025
Malicious code in despina-kastra-forever-supervisor (npm)
- Nov 13, 2025
Malicious code in despina-cluster-asteroid-wormhole (npm)
- Nov 13, 2025
Malicious code in deserialize-rain-stub-alpha-socket (npm)
- Nov 13, 2025
Malicious code in deserialize-load-byte-delta-optimize (npm)
- Nov 13, 2025
Malicious code in deserialize-double-simulate-interpret-tau (npm)
- Nov 13, 2025
Malicious code in deserialize-book-cloud-awk-finally (npm)
- Nov 13, 2025
Malicious code in deploy-thread-scale-omega-enum (npm)
- Nov 13, 2025
Malicious code in deploy-good-data-double-unix (npm)
- Nov 13, 2025
Malicious code in deploy-awk-user-psi-mu (npm)
- Nov 13, 2025
Malicious code in dependencies-tectonophysics-archaeoastronomy-mechatronics (npm)
- Nov 13, 2025
Malicious code in dependencies-taurus-dotenv-safe-ora (npm)
- Nov 13, 2025
Malicious code in dependencies-nova-meteor-mira (npm)
- Nov 13, 2025
Malicious code in dependencies-galaxy-install-module (npm)
- Nov 13, 2025
Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)
- Nov 13, 2025
Malicious code in deneb-warp-nucleosynthesis-lepton (npm)
- Nov 13, 2025
Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus (npm)
- Nov 13, 2025
Malicious code in deneb-speleology-sadr-config (npm)
- Nov 13, 2025
Malicious code in deneb-parallax-aldebaran-prettier (npm)
- Nov 13, 2025
Malicious code in deneb-multiverse-augmentedreality-phoenix (npm)
- Nov 13, 2025
Malicious code in deneb-juno-virtualreality-middleware (npm)
- Nov 13, 2025
Malicious code in deneb-juno-telesto-shelljs (npm)
- Nov 13, 2025
Malicious code in deneb-iota-xenos-celeste (npm)
- Nov 13, 2025
Malicious code in deneb-halley-astrochemistry-nightwatch (npm)
- Nov 13, 2025
Malicious code in deneb-biosignature-taphonomy-glaciology (npm)
- Nov 13, 2025
Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in dendrochronology-test-markdownlint-grunt (npm)
- Nov 13, 2025
Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm)
- Nov 13, 2025
Malicious code in dendrochronology-metalsmith-rollup-plutology (npm)
- Nov 13, 2025
Malicious code in dendrochronology-graphql-betelgeuse-acamar (npm)
- Nov 13, 2025
Malicious code in dendrochronology-eslint-plugin-andromeda-helios (npm)
- Nov 13, 2025
Malicious code in dendrochronology-colors-cosmos-run-script (npm)
- Nov 13, 2025
Malicious code in dendrochronology-biomimicry-supernova-library (npm)
- Nov 13, 2025
Malicious code in delta-sun-psi-new-byte (npm)
- Nov 13, 2025
Malicious code in delta-string-enum-thread-uglify (npm)
- Nov 13, 2025
Malicious code in delta-encrypt-decrypt-process-hot (npm)
- Nov 13, 2025
Malicious code in delphinus-xml-acamar-json (npm)
- Nov 13, 2025
Malicious code in delphinus-vuepress-antares-europa (npm)
- Nov 13, 2025
Malicious code in delphinus-tool-sync-geckodriver (npm)
- Nov 13, 2025
Malicious code in delphinus-run-script-deneb-query (npm)
- Nov 13, 2025
Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in delphinus-paleoclimatology-stream-wezen (npm)
- Nov 13, 2025
Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)
- Nov 13, 2025
Malicious code in delphinus-ganymede-sadr-ophiuchus (npm)
- Nov 13, 2025
Malicious code in delphinus-framework-miranda-chalk (npm)
- Nov 13, 2025
Malicious code in delphinus-chromedriver-quasar-cordelia (npm)
Page 352 of 4,814