Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in concurrently-ultra-protractor-paleoceanography (npm)
- Nov 13, 2025
Malicious code in concurrently-scripts-plutology-nightmare (npm)
- Nov 13, 2025
Malicious code in concurrently-janus-spinner-palynology (npm)
- Nov 13, 2025
Malicious code in concurrently-janus-equinox-spinner (npm)
- Nov 13, 2025
Malicious code in concurrently-hawkingradiation-tailwindcss-janus (npm)
- Nov 13, 2025
Malicious code in concurrently-grus-vuepress-zenith (npm)
- Nov 13, 2025
Malicious code in concurrently-fork-blazar-helios (npm)
- Nov 13, 2025
Malicious code in concurrently-configstore-lyra-perseus (npm)
- Nov 13, 2025
Malicious code in compress-water-cluster-slow-cat (npm)
- Nov 13, 2025
Malicious code in compress-tau-enum-book-serialize (npm)
- Nov 13, 2025
Malicious code in compress-async-rho-boolean-assert (npm)
- Nov 13, 2025
Malicious code in compile-xi-small-star-decompress (npm)
- Nov 13, 2025
Malicious code in compile-validate-sandbox-node-async (npm)
- Nov 13, 2025
Malicious code in compile-gamma-wind-code-deserialize (npm)
- Nov 13, 2025
Malicious code in compile-catch-gamma-encode-resolve (npm)
- Nov 13, 2025
Malicious code in commitlint-slides-octans-resolvers (npm)
- Nov 13, 2025
Malicious code in commitlint-resolvers-procyon-pm2 (npm)
- Nov 13, 2025
Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)
- Nov 13, 2025
Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-sadr-cluster-mira (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-init-miranda-luna (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-hercules-express-yonder (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm)
- Nov 13, 2025
Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm)
- Nov 13, 2025
Malicious code in commitlint-chalk-neptune-auriga (npm)
- Nov 13, 2025
Malicious code in commitlint-chalk-eclipse-init (npm)
- Nov 13, 2025
Malicious code in commitlint-betelgeuse-yaml-indus (npm)
- Nov 13, 2025
Malicious code in commitizen-singularitarianism-framework-wavefunction (npm)
- Nov 13, 2025
Malicious code in commitizen-radioastronomy-steganography-grunt (npm)
- Nov 13, 2025
Malicious code in commitizen-playwright-selenium-publish (npm)
- Nov 13, 2025
Malicious code in commitizen-markdown-luminescence-meteor (npm)
- Nov 13, 2025
Malicious code in commitizen-eclipse-sadr-chariklo (npm)
- Nov 13, 2025
Malicious code in commitizen-chromedriver-redis-polaris (npm)
- Nov 13, 2025
Malicious code in commitizen-antares-magellan-saturnology (npm)
- Nov 13, 2025
Malicious code in command-xo-module-antd (npm)
- Nov 13, 2025
Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)
- Nov 13, 2025
Malicious code in command-pulsar-atlas-on (npm)
- Nov 13, 2025
Malicious code in command-prettier-stylelint-server-schema (npm)
- Nov 13, 2025
Malicious code in command-leda-fetch-delphinus (npm)
- Nov 13, 2025
Malicious code in command-dotenv-safe-oberon-lint-staged (npm)
- Nov 13, 2025
Malicious code in command-dotenv-betelgeuse-neutronstar (npm)
- Nov 13, 2025
Malicious code in command-celeste-resonance-hyperion (npm)
- Nov 13, 2025
Malicious code in command-bootstrap-exoplanetology-paleontology (npm)
- Nov 13, 2025
Malicious code in command-blazar-node-config-phylogenetics (npm)
- Nov 13, 2025
Malicious code in command-axios-asteroid-carina (npm)
- Nov 13, 2025
Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm)
- Nov 13, 2025
Malicious code in comet-rehype-transport-entanglement (npm)
- Nov 13, 2025
Malicious code in comet-pyxis-cosmochemistry-library (npm)
- Nov 13, 2025
Malicious code in comet-publish-palynology-farout (npm)
Page 358 of 4,814