Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,658 total in npm · sorted newest first- Nov 13, 2025
Malicious code in comet-private-crust-andromeda (npm)
- Nov 13, 2025
Malicious code in comet-perturbation-testcafe-astrobiology (npm)
- Nov 13, 2025
Malicious code in comet-perseus-andromeda-terraforming (npm)
- Nov 13, 2025
Malicious code in comet-orbit-umbriel-thermochronology (npm)
- Nov 13, 2025
Malicious code in comet-oauth-airbnb-tethys (npm)
- Nov 13, 2025
Malicious code in comet-norma-semantic-release-rest (npm)
- Nov 13, 2025
Malicious code in comet-mutation-commitlint-csrf (npm)
- Nov 13, 2025
Malicious code in comet-exoplanet-oortcloud-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in comet-cassini-stratigraphy-mensa (npm)
- Nov 13, 2025
Malicious code in comet-axios-chakra-ui-ora (npm)
- Nov 13, 2025
Malicious code in comet-auth-html-webpack-plugin-request (npm)
- Nov 13, 2025
Malicious code in comet-areology-exobiology-perturbation (npm)
- Nov 13, 2025
Malicious code in colors-superflare-rigel-quark (npm)
- Nov 13, 2025
Malicious code in colors-style-loader-bellatrix-tool (npm)
- Nov 13, 2025
Malicious code in colors-rigel-bellatrix-pyxis (npm)
- Nov 13, 2025
Malicious code in colors-request-xo-xerxes (npm)
- Nov 13, 2025
Malicious code in colors-paleomagnetism-global-unuk (npm)
- Nov 13, 2025
Malicious code in colors-nightwatch-antimatter-postcss-loader (npm)
- Nov 13, 2025
Malicious code in colors-gravity-cosmiconfig-zephyr (npm)
- Nov 13, 2025
Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in cold-phi-cloud-cluster-private (npm)
- Nov 13, 2025
Malicious code in cold-old-monitor-zeta-process (npm)
- Nov 13, 2025
Malicious code in cold-mock-daemon-hash-thread (npm)
- Nov 13, 2025
Malicious code in cold-hot-beta-log-daemon (npm)
- Nov 13, 2025
Malicious code in cold-dog-module-notify-good (npm)
- Nov 13, 2025
Malicious code in cold-cron-object-chi-export (npm)
- Nov 13, 2025
Malicious code in cold-bad-theta-epsilon-route (npm)
- Nov 13, 2025
Malicious code in code-report-cold-iota-root (npm)
- Nov 13, 2025
Malicious code in code-interpret-finally-decode-cold (npm)
- Nov 13, 2025
Malicious code in code-code-old-reject-cat (npm)
- Nov 13, 2025
Malicious code in cluster-wind-fork-view-monitor (npm)
- Nov 13, 2025
Malicious code in cluster-wind-decode-sigma-web (npm)
- Nov 13, 2025
Malicious code in cluster-wavefunction-subduction-transhumanism (npm)
- Nov 13, 2025
Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)
- Nov 13, 2025
Malicious code in cluster-tool-quasarjet-meteor (npm)
- Nov 13, 2025
Malicious code in cluster-steganography-slides-entanglement (npm)
- Nov 13, 2025
Malicious code in cluster-sirius-promise-neutrino (npm)
- Nov 13, 2025
Malicious code in cluster-simple-encrypt-cloud-balance (npm)
- Nov 13, 2025
Malicious code in cluster-sanitize-resolve-omega-encrypt (npm)
- Nov 13, 2025
Malicious code in cluster-protected-resolve-cloud-refactor (npm)
- Nov 13, 2025
Malicious code in cluster-norma-solarnebula-outercore (npm)
- Nov 13, 2025
Malicious code in cluster-magnetar-leda-scorpius (npm)
- Nov 13, 2025
Malicious code in cluster-decompress-double-encode-quick (npm)
- Nov 13, 2025
Malicious code in cluster-cosmochemistry-helmet-xenon (npm)
- Nov 13, 2025
Malicious code in cluster-concurrently-wolf-astrometry (npm)
- Nov 13, 2025
Malicious code in cluster-child-process-remark-hadron (npm)
- Nov 13, 2025
Malicious code in cloud-water-old-moon-wind (npm)
- Nov 13, 2025
Malicious code in cloud-user-static-promise-stub (npm)
- Nov 13, 2025
Malicious code in cloud-star-parse-fork-sandbox (npm)
- Nov 13, 2025
Malicious code in cloud-fire-grid-kernel-cron (npm)
Page 359 of 4,814