Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in deimos-wezen-parsec-transport (npm)
- Nov 13, 2025
Malicious code in deimos-selenium-local-futurology (npm)
- Nov 13, 2025
Malicious code in deimos-redshift-plutology-google (npm)
- Nov 13, 2025
Malicious code in deimos-polaris-gridsome-magellan (npm)
- Nov 13, 2025
Malicious code in deimos-phoenix-impulse-standard (npm)
- Nov 13, 2025
Malicious code in deimos-koa-build-figures (npm)
- Nov 13, 2025
Malicious code in deimos-iota-luminescence-geochemistry (npm)
- Nov 13, 2025
Malicious code in deimos-hermes-quantum-venus (npm)
- Nov 13, 2025
Malicious code in deimos-concurrently-outercore-browserify (npm)
- Nov 13, 2025
Malicious code in deimos-ceres-astro-isostasy (npm)
- Nov 13, 2025
Malicious code in deimos-await-castor-dotenv (npm)
- Nov 13, 2025
Malicious code in decrypt-xml-compress-moon-file (npm)
- Nov 13, 2025
Malicious code in decrypt-sun-mock-rain-debug (npm)
- Nov 13, 2025
Malicious code in decrypt-info-meta-table-big (npm)
- Nov 13, 2025
Malicious code in decrypt-import-info-optimize-authorize (npm)
- Nov 13, 2025
Malicious code in decompress-tree-protected-upsilon-mu (npm)
- Nov 13, 2025
Malicious code in decompress-simple-lambda-container-meta (npm)
- Nov 13, 2025
Malicious code in decompress-sed-sudo-index-nu (npm)
- Nov 13, 2025
Malicious code in decompress-deserialize-nu-new-emulate (npm)
- Nov 13, 2025
Malicious code in decoherence-neptune-saturnology-transport (npm)
- Nov 13, 2025
Malicious code in decoherence-fetch-wezen-enif (npm)
- Nov 13, 2025
Malicious code in decode-info-new-finally-new (npm)
- Nov 13, 2025
Malicious code in decode-export-data-cold-error (npm)
- Nov 13, 2025
Malicious code in decode-authenticate-final-delta-enum (npm)
- Nov 13, 2025
Malicious code in debug-user-pipe-sun-simple (npm)
- Nov 13, 2025
Malicious code in debug-tau-wind-gamma-sun (npm)
- Nov 13, 2025
Malicious code in debug-container-zeta-load-log (npm)
- Nov 13, 2025
Malicious code in debug-char-code-double-encode (npm)
- Nov 13, 2025
Malicious code in debug-cache-report-cache-index (npm)
- Nov 13, 2025
Malicious code in data-virtualize-cluster-view-phi (npm)
- Nov 13, 2025
Malicious code in data-omicron-static-quick-serialize (npm)
- Nov 13, 2025
Malicious code in data-node-sanitize-balance-optimize (npm)
- Nov 13, 2025
Malicious code in data-grep-string-transpile-link (npm)
- Nov 13, 2025
Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm)
- Nov 13, 2025
Malicious code in darkmatter-halley-farout-archaeometry (npm)
- Nov 13, 2025
Malicious code in darkmatter-gravitationalwave-less-websockets (npm)
- Nov 13, 2025
Malicious code in darkmatter-exosphere-exoplanetology-yakutsk (npm)
- Nov 13, 2025
Malicious code in darkmatter-build-kuiperbelt-xanthus (npm)
- Nov 13, 2025
Malicious code in darkenergy-style-loader-style-loader-node-config (npm)
- Nov 13, 2025
Malicious code in darkenergy-regulus-hadron-elektra (npm)
- Nov 13, 2025
Malicious code in darkenergy-palynology-publish-terraforming (npm)
- Nov 13, 2025
Malicious code in darkenergy-janus-firebase-chalk (npm)
- Nov 13, 2025
Malicious code in darkenergy-helmet-epigenetics-leda (npm)
- Nov 13, 2025
Malicious code in darkenergy-google-paleoanthropology-thuban (npm)
- Nov 13, 2025
Malicious code in darkenergy-config-pulsar-development (npm)
- Nov 13, 2025
Malicious code in dagda-tectonophysics-materialize-astrometry (npm)
- Nov 13, 2025
Malicious code in dagda-technocracy-commitlint-gacrux (npm)
- Nov 13, 2025
Malicious code in dagda-spawn-selenium-vega (npm)
- Nov 13, 2025
Malicious code in dagda-pulsar-redshift-remark (npm)
- Nov 13, 2025
Malicious code in dagda-polaris-entanglement-meteor (npm)
Page 353 of 4,814