Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in chalk-paleontology-quasar-taurus (npm)
- Nov 13, 2025
Malicious code in chalk-paleoclimatology-dependencies-parsec (npm)
- Nov 13, 2025
Malicious code in chalk-mui-neptune-cosmos (npm)
- Nov 13, 2025
Malicious code in chalk-mira-procyon-schema (npm)
- Nov 13, 2025
Malicious code in chalk-interferometry-telesto-ophiuchus (npm)
- Nov 13, 2025
Malicious code in chalk-cluster-nucleosynthesis-pipe (npm)
- Nov 13, 2025
Malicious code in chalk-asteroid-await-prettier-stylelint (npm)
- Nov 13, 2025
Malicious code in chakra-ui-test-quark-astrophysics (npm)
- Nov 13, 2025
Malicious code in chakra-ui-standard-nuxtjs-sass-loader (npm)
- Nov 13, 2025
Malicious code in chakra-ui-sadr-yaml-less-loader (npm)
- Nov 13, 2025
Malicious code in chakra-ui-ophiuchus-sublimation-readable (npm)
- Nov 13, 2025
Malicious code in chakra-ui-levels-mdx-mongoose (npm)
- Nov 13, 2025
Malicious code in chakra-ui-fornax-umbriel-wezen (npm)
- Nov 13, 2025
Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)
- Nov 13, 2025
Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)
- Nov 13, 2025
Malicious code in chai-tachyon-init-procyon (npm)
- Nov 13, 2025
Malicious code in chai-schema-plutology-eclipse (npm)
- Nov 13, 2025
Malicious code in chai-prompts-auth0-geckodriver (npm)
- Nov 13, 2025
Malicious code in chai-node-sass-biosignature-tardigrade (npm)
- Nov 13, 2025
Malicious code in chai-mesosphere-astro-postgres (npm)
- Nov 13, 2025
Malicious code in chai-juno-eleventy-hydrogeology (npm)
- Nov 13, 2025
Malicious code in chai-javascript-pulsar-pyxis (npm)
- Nov 13, 2025
Malicious code in chai-greatfilter-phoenix-nconf (npm)
- Nov 13, 2025
Malicious code in chai-got-pino-commitizen (npm)
- Nov 13, 2025
Malicious code in chai-gatsby-coronalmassejection-nuxtjs (npm)
- Nov 13, 2025
Malicious code in chai-blazar-quasar-link (npm)
- Nov 13, 2025
Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in ceres-petrology-callisto-shelljs (npm)
- Nov 13, 2025
Malicious code in ceres-perseus-csv-nconf (npm)
- Nov 13, 2025
Malicious code in ceres-morgan-stream-singularitarianism (npm)
- Nov 13, 2025
Malicious code in ceres-augmentedreality-iota-transport (npm)
- Nov 13, 2025
Malicious code in centaurus-triton-library-resolvers (npm)
- Nov 13, 2025
Malicious code in centaurus-test-rollup-webdriver-mocha (npm)
- Nov 13, 2025
Malicious code in centaurus-superagent-spinner-leda (npm)
- Nov 13, 2025
Malicious code in centaurus-quasar-module-rimraf (npm)
- Nov 13, 2025
Malicious code in centaurus-perseus-remark-sync (npm)
- Nov 13, 2025
Malicious code in centaurus-neptune-css-loader-lynx (npm)
- Nov 13, 2025
Malicious code in centaurus-miranda-meteor-frontend (npm)
- Nov 13, 2025
Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)
- Nov 13, 2025
Malicious code in centaurus-farout-html-webpack-plugin-callisto (npm)
- Nov 13, 2025
Malicious code in centaurus-browserify-run-script-interferometry (npm)
- Nov 13, 2025
Malicious code in centaurus-biohacking-mongoose-nova (npm)
- Nov 13, 2025
Malicious code in centaurus-backend-json-draco (npm)
- Nov 13, 2025
Malicious code in centauri-xenos-phoebe-heliophysics (npm)
- Nov 13, 2025
Malicious code in centauri-xenobiology-prompts-foundation (npm)
- Nov 13, 2025
Malicious code in centauri-troposphere-umbriel-decoherence (npm)
- Nov 13, 2025
Malicious code in centauri-protractor-biosignature-supernova (npm)
- Nov 13, 2025
Malicious code in centauri-module-adonis-reveal-md (npm)
- Nov 13, 2025
Malicious code in centauri-mesosphere-deneb-solarnebula (npm)
- Nov 13, 2025
Malicious code in centauri-lyra-prompts-commitlint (npm)
Page 363 of 4,815