Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,729 total in npm · sorted newest first- Nov 13, 2025
Malicious code in commitizen-radioastronomy-steganography-grunt (npm)
- Nov 13, 2025
Malicious code in commitizen-playwright-selenium-publish (npm)
- Nov 13, 2025
Malicious code in commitizen-markdown-luminescence-meteor (npm)
- Nov 13, 2025
Malicious code in commitizen-eclipse-sadr-chariklo (npm)
- Nov 13, 2025
Malicious code in commitizen-chromedriver-redis-polaris (npm)
- Nov 13, 2025
Malicious code in commitizen-antares-magellan-saturnology (npm)
- Nov 13, 2025
Malicious code in command-xo-module-antd (npm)
- Nov 13, 2025
Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)
- Nov 13, 2025
Malicious code in command-pulsar-atlas-on (npm)
- Nov 13, 2025
Malicious code in command-prettier-stylelint-server-schema (npm)
- Nov 13, 2025
Malicious code in command-leda-fetch-delphinus (npm)
- Nov 13, 2025
Malicious code in command-dotenv-safe-oberon-lint-staged (npm)
- Nov 13, 2025
Malicious code in command-dotenv-betelgeuse-neutronstar (npm)
- Nov 13, 2025
Malicious code in command-celeste-resonance-hyperion (npm)
- Nov 13, 2025
Malicious code in command-bootstrap-exoplanetology-paleontology (npm)
- Nov 13, 2025
Malicious code in command-blazar-node-config-phylogenetics (npm)
- Nov 13, 2025
Malicious code in command-axios-asteroid-carina (npm)
- Nov 13, 2025
Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm)
- Nov 13, 2025
Malicious code in comet-rehype-transport-entanglement (npm)
- Nov 13, 2025
Malicious code in comet-pyxis-cosmochemistry-library (npm)
- Nov 13, 2025
Malicious code in comet-publish-palynology-farout (npm)
- Nov 13, 2025
Malicious code in comet-private-crust-andromeda (npm)
- Nov 13, 2025
Malicious code in comet-perturbation-testcafe-astrobiology (npm)
- Nov 13, 2025
Malicious code in comet-perseus-andromeda-terraforming (npm)
- Nov 13, 2025
Malicious code in comet-orbit-umbriel-thermochronology (npm)
- Nov 13, 2025
Malicious code in comet-oauth-airbnb-tethys (npm)
- Nov 13, 2025
Malicious code in comet-norma-semantic-release-rest (npm)
- Nov 13, 2025
Malicious code in comet-mutation-commitlint-csrf (npm)
- Nov 13, 2025
Malicious code in comet-exoplanet-oortcloud-cosmicsilence (npm)
- Nov 13, 2025
Malicious code in comet-cassini-stratigraphy-mensa (npm)
- Nov 13, 2025
Malicious code in comet-axios-chakra-ui-ora (npm)
- Nov 13, 2025
Malicious code in comet-auth-html-webpack-plugin-request (npm)
- Nov 13, 2025
Malicious code in comet-areology-exobiology-perturbation (npm)
- Nov 13, 2025
Malicious code in colors-superflare-rigel-quark (npm)
- Nov 13, 2025
Malicious code in colors-style-loader-bellatrix-tool (npm)
- Nov 13, 2025
Malicious code in colors-rigel-bellatrix-pyxis (npm)
- Nov 13, 2025
Malicious code in colors-request-xo-xerxes (npm)
- Nov 13, 2025
Malicious code in colors-paleomagnetism-global-unuk (npm)
- Nov 13, 2025
Malicious code in colors-nightwatch-antimatter-postcss-loader (npm)
- Nov 13, 2025
Malicious code in colors-gravity-cosmiconfig-zephyr (npm)
- Nov 13, 2025
Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)
- Nov 13, 2025
Malicious code in cold-phi-cloud-cluster-private (npm)
- Nov 13, 2025
Malicious code in cold-old-monitor-zeta-process (npm)
- Nov 13, 2025
Malicious code in cold-mock-daemon-hash-thread (npm)
- Nov 13, 2025
Malicious code in cold-hot-beta-log-daemon (npm)
- Nov 13, 2025
Malicious code in cold-dog-module-notify-good (npm)
- Nov 13, 2025
Malicious code in cold-cron-object-chi-export (npm)
- Nov 13, 2025
Malicious code in cold-bad-theta-epsilon-route (npm)
- Nov 13, 2025
Malicious code in code-report-cold-iota-root (npm)
- Nov 13, 2025
Malicious code in code-interpret-finally-decode-cold (npm)
Page 360 of 4,815