Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in chromedriver-jwt-paleoclimatology-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in chromedriver-json-polaris-hyperion (npm)
- Nov 13, 2025
Malicious code in chromedriver-hyperion-isostasy-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in child-process-xenon-avior-perseus (npm)
- Nov 13, 2025
Malicious code in child-process-stratigraphy-subduction-node-sass (npm)
- Nov 13, 2025
Malicious code in child-process-loglevel-elektra-eleventy (npm)
- Nov 13, 2025
Malicious code in child-process-eridanus-cypress-zephyr (npm)
- Nov 13, 2025
Malicious code in child-process-concurrently-chakra-ui-node-sass (npm)
- Nov 13, 2025
Malicious code in child-process-charon-mui-on (npm)
- Nov 13, 2025
Malicious code in child-process-blitz-spawn-wasat (npm)
- Nov 13, 2025
Malicious code in chi-short-export-assert-execute (npm)
- Nov 13, 2025
Malicious code in chi-route-good-integer-grep (npm)
- Nov 13, 2025
Malicious code in chi-omega-permission-analyze-warn (npm)
- Nov 13, 2025
Malicious code in chi-mu-socket-cold-small (npm)
- Nov 13, 2025
Malicious code in chi-iota-decompress-sed-emulate (npm)
- Nov 13, 2025
Malicious code in chi-error-kappa-shell-error (npm)
- Nov 13, 2025
Malicious code in chi-cron-sudo-finally-visualize (npm)
- Nov 13, 2025
Malicious code in chi-bad-deserialize-throw-static (npm)
- Nov 13, 2025
Malicious code in charon-transhumanism-zephyr-electron-builder (npm)
- Nov 13, 2025
Malicious code in charon-stream-fornax-dotenv (npm)
- Nov 13, 2025
Malicious code in chariklo-sirius-relay-leda (npm)
- Nov 13, 2025
Malicious code in chariklo-perseus-chalk-antares (npm)
- Nov 13, 2025
Malicious code in chariklo-library-public-local (npm)
- Nov 13, 2025
Malicious code in chariklo-dysonswarm-yildun-adonis (npm)
- Nov 13, 2025
Malicious code in chariklo-babel-postgres-thuban (npm)
- Nov 13, 2025
Malicious code in chariklo-areology-changelog-arcturus (npm)
- Nov 13, 2025
Malicious code in char-xml-xml-validate-validate (npm)
- Nov 13, 2025
Malicious code in char-hot-import-public-process (npm)
- Nov 13, 2025
Malicious code in char-double-load-notify-gamma (npm)
- Nov 13, 2025
Malicious code in char-cat-execute-eta-authenticate (npm)
- Nov 13, 2025
Malicious code in char-bundle-route-refactor-async (npm)
- Nov 13, 2025
Malicious code in char-alert-abstract-decrypt-test (npm)
- Nov 13, 2025
Malicious code in changelog-unuk-antares-restart (npm)
- Nov 13, 2025
Malicious code in changelog-tachyon-writable-pipe (npm)
- Nov 13, 2025
Malicious code in changelog-supernova-mantle-hermes (npm)
- Nov 13, 2025
Malicious code in changelog-prompts-europa-blazar (npm)
- Nov 13, 2025
Malicious code in changelog-polaris-dotenv-safe-phoebe (npm)
- Nov 13, 2025
Malicious code in changelog-multiverse-heliophysics-regulus (npm)
- Nov 13, 2025
Malicious code in changelog-middleware-koa-betelgeuse (npm)
- Nov 13, 2025
Malicious code in changelog-hugo-fusion-tectonic (npm)
- Nov 13, 2025
Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in changelog-graviton-hadron-panspermia (npm)
- Nov 13, 2025
Malicious code in changelog-borealis-resolvers-resonance (npm)
- Nov 13, 2025
Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)
- Nov 13, 2025
Malicious code in chalk-supercluster-repository-morgan (npm)
- Nov 13, 2025
Malicious code in chalk-stop-indus-module (npm)
- Nov 13, 2025
Malicious code in chalk-steganography-europa-spawn (npm)
- Nov 13, 2025
Malicious code in chalk-soap-eris-mini-css-extract-plugin (npm)
- Nov 13, 2025
Malicious code in chalk-resonance-triton-mineralogy (npm)
- Nov 13, 2025
Malicious code in chalk-pulsar-native-xerxes (npm)
Page 362 of 4,815