Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in centauri-luna-cli-tethys (npm)
- Nov 13, 2025
Malicious code in centauri-lint-staged-helios-sequelize (npm)
- Nov 13, 2025
Malicious code in centauri-leda-playwright-cygnus (npm)
- Nov 13, 2025
Malicious code in centauri-lacerta-config-taurus (npm)
- Nov 13, 2025
Malicious code in centauri-filament-private-on (npm)
- Nov 13, 2025
Malicious code in centauri-cli-transport-selenium (npm)
- Nov 13, 2025
Malicious code in celeste-selenology-socketio-carpo (npm)
- Nov 13, 2025
Malicious code in celeste-pm2-xerxes-kuiperbelt (npm)
- Nov 13, 2025
Malicious code in celeste-baryon-stop-nodejs (npm)
- Nov 13, 2025
Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)
- Nov 13, 2025
Malicious code in catch-stack-load-public-grep (npm)
- Nov 13, 2025
Malicious code in catch-float-cluster-assert-load (npm)
- Nov 13, 2025
Malicious code in catch-daemon-mock-emulate-validate (npm)
- Nov 13, 2025
Malicious code in catch-byte-decompress-cluster-assert (npm)
- Nov 13, 2025
Malicious code in catch-bash-string-long-catch (npm)
- Nov 13, 2025
Malicious code in catch-bash-mu-daemon-slow (npm)
- Nov 13, 2025
Malicious code in cat-void-bash-cache-bundle (npm)
- Nov 13, 2025
Malicious code in cat-sudo-node-decrypt-analyze (npm)
- Nov 13, 2025
Malicious code in cat-minify-cold-reject-monitor (npm)
- Nov 13, 2025
Malicious code in cat-meta-stack-minify-try (npm)
- Nov 13, 2025
Malicious code in cat-encrypt-export-kappa-validate (npm)
- Nov 13, 2025
Malicious code in cat-compile-analyze-deploy-cloud (npm)
- Nov 13, 2025
Malicious code in cat-big-code-star-encrypt (npm)
- Nov 13, 2025
Malicious code in cat-air-xi-slow-visualize (npm)
- Nov 13, 2025
Malicious code in castor-warp-asthenosphere-apollo (npm)
- Nov 13, 2025
Malicious code in castor-singularitarianism-parcel-perseus (npm)
- Nov 13, 2025
Malicious code in castor-magellan-halley-equinox (npm)
- Nov 13, 2025
Malicious code in castor-janus-interferometry-asteroid (npm)
- Nov 13, 2025
Malicious code in castor-ganymede-registry-blaze (npm)
- Nov 13, 2025
Malicious code in castor-cosmology-planetology-toml (npm)
- Nov 13, 2025
Malicious code in castor-callisto-miranda-quasar (npm)
- Nov 13, 2025
Malicious code in castor-avior-nebula-heka (npm)
- Nov 13, 2025
Malicious code in castor-andromeda-izar-config (npm)
- Nov 13, 2025
Malicious code in cassini-terser-prettier-mysql (npm)
- Nov 13, 2025
Malicious code in cassini-socketio-concurrently-forever (npm)
- Nov 13, 2025
Malicious code in cassini-pyxis-proxima-isostasy (npm)
- Nov 13, 2025
Malicious code in cassini-markdown-pdf-fork-polaris (npm)
- Nov 13, 2025
Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)
- Nov 13, 2025
Malicious code in cassini-hawkingradiation-rocket-sedna (npm)
- Nov 13, 2025
Malicious code in cassini-halley-jekyll-less (npm)
- Nov 13, 2025
Malicious code in cassini-frontend-umbriel-ophiuchus (npm)
- Nov 13, 2025
Malicious code in carpo-release-it-oberon-halley (npm)
- Nov 13, 2025
Malicious code in carpo-mdx-comet-hyperion (npm)
- Nov 13, 2025
Malicious code in carpo-lynx-sirius-sirius (npm)
- Nov 13, 2025
Malicious code in carpo-hermes-firebase-nightmare (npm)
- Nov 13, 2025
Malicious code in carpo-aurora-pegasus-sqlite (npm)
- Nov 13, 2025
Malicious code in carina-telesto-taurus-cladistics (npm)
- Nov 13, 2025
Malicious code in carina-solis-ultra-rimraf (npm)
- Nov 13, 2025
Malicious code in capella-yaml-innercore-hermes (npm)
- Nov 13, 2025
Malicious code in capella-tethys-lynx-antimatter (npm)
Page 364 of 4,815