Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in cressida-yakutsk-zephyr-rollup (npm)
- Nov 13, 2025
Malicious code in cressida-vortex-lint-staged-blueshift (npm)
- Nov 13, 2025
Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm)
- Nov 13, 2025
Malicious code in cressida-jwt-loglevel-fetch (npm)
- Nov 13, 2025
Malicious code in cressida-indus-epimetheus-borealis (npm)
- Nov 13, 2025
Malicious code in cressida-cybernetics-rollup-plugin-node-sass (npm)
- Nov 13, 2025
Malicious code in cressida-cache-iota-antares (npm)
- Nov 13, 2025
Malicious code in cosmos-yonder-grunt-nashira (npm)
- Nov 13, 2025
Malicious code in cosmos-volcanology-cassini-nova (npm)
- Nov 13, 2025
Malicious code in cosmos-void-procyon-nanotechnology (npm)
- Nov 13, 2025
Malicious code in cosmos-public-warp-planckscale (npm)
- Nov 13, 2025
Malicious code in cosmos-geochemistry-sqlite-lint-staged (npm)
- Nov 13, 2025
Malicious code in cosmos-framework-gacrux-pm2 (npm)
- Nov 13, 2025
Malicious code in cosmos-coronalmassejection-remark-arcturus (npm)
- Nov 13, 2025
Malicious code in cosmos-concurrently-uninstall-jest (npm)
- Nov 13, 2025
Malicious code in cosmos-centaurus-charon-tool (npm)
- Nov 13, 2025
Malicious code in cosmology-schema-morgan-canopus (npm)
- Nov 13, 2025
Malicious code in cosmology-levels-terser-iota (npm)
- Nov 13, 2025
Malicious code in cosmology-geodynamo-blaze-perturbation (npm)
- Nov 13, 2025
Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)
- Nov 13, 2025
Malicious code in cosmogenic-polaris-helios-atlas (npm)
- Nov 13, 2025
Malicious code in cosmogenic-genomics-scripts-cache (npm)
- Nov 13, 2025
Malicious code in cosmogenic-astroinformatics-mesosphere-soap (npm)
- Nov 13, 2025
Malicious code in cosmochemistry-transport-primatology-xenos (npm)
- Nov 13, 2025
Malicious code in cosmochemistry-lynx-ceres-europa (npm)
- Nov 13, 2025
Malicious code in cosmochemistry-less-enceladus-eigenstate (npm)
- Nov 13, 2025
Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md (npm)
- Nov 13, 2025
Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm)
- Nov 13, 2025
Malicious code in cosmicweb-sedimentology-ignite-library (npm)
- Nov 13, 2025
Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm)
- Nov 13, 2025
Malicious code in cosmicweb-leda-sadr-reveal-md (npm)
- Nov 13, 2025
Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)
- Nov 13, 2025
Malicious code in cosmicsilence-uranology-io-solis (npm)
- Nov 13, 2025
Malicious code in cosmicsilence-quasar-vulcan-gammarayburst (npm)
- Nov 13, 2025
Malicious code in cosmicray-ursa-helmet-deneb (npm)
- Nov 13, 2025
Malicious code in cosmicray-nova-regulus-eleventy (npm)
- Nov 13, 2025
Malicious code in cosmicray-mechatronics-selenium-tailwindcss (npm)
- Nov 13, 2025
Malicious code in cosmicray-foundation-nconf-plutology (npm)
- Nov 13, 2025
Malicious code in cosmicray-draco-interferometry-heka (npm)
- Nov 13, 2025
Malicious code in cosmicray-andromeda-registry-npm (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-xml-rehype-webpack (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-gatsby-janus-slides (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-fermiparadox-parsec-forever (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-deimos-kaus-hyperion (npm)
- Nov 13, 2025
Malicious code in cosmiconfig-biosignature-vulcan-pipe (npm)
- Nov 13, 2025
Malicious code in corvus-vuepress-concurrently-elara (npm)
- Nov 13, 2025
Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm)
- Nov 13, 2025
Malicious code in corvus-javascript-charon-semantic-ui (npm)
- Nov 13, 2025
Malicious code in corvus-darkmatter-titan-version (npm)
Page 356 of 4,814