Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in bunyan-release-it-carpo-request (npm)
- Nov 13, 2025
Malicious code in bunyan-redis-capella-html-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in bunyan-radioastronomy-interstellarmedium-outercore (npm)
- Nov 13, 2025
Malicious code in bunyan-pegasus-primatology-quantum-computing (npm)
- Nov 13, 2025
Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)
- Nov 13, 2025
Malicious code in bunyan-cosmicray-membrane-terser (npm)
- Nov 13, 2025
Malicious code in bunyan-carina-adonis-mysql (npm)
- Nov 13, 2025
Malicious code in bunyan-callback-pipe-mysql (npm)
- Nov 13, 2025
Malicious code in bunyan-areology-glaciology-charon (npm)
- Nov 13, 2025
Malicious code in bundle-theta-virtualize-sanitize-sigma (npm)
- Nov 13, 2025
Malicious code in bundle-static-pipe-mu-float (npm)
- Nov 13, 2025
Malicious code in bundle-alert-runtime-private-bundle (npm)
- Nov 13, 2025
Malicious code in bulma-yonder-acamar-ichnology (npm)
- Nov 13, 2025
Malicious code in bulma-titan-axios-ariel (npm)
- Nov 13, 2025
Malicious code in bulma-regulus-mesosphere-resolvers (npm)
- Nov 13, 2025
Malicious code in bulma-rate-limiter-nodemon-aurora (npm)
- Nov 13, 2025
Malicious code in bulma-promise-redgiant-xenobiology (npm)
- Nov 13, 2025
Malicious code in bulma-interferometry-mesosphere-jabbah (npm)
- Nov 13, 2025
Malicious code in bulma-equinox-build-nova (npm)
- Nov 13, 2025
Malicious code in build-perseus-repository-asteroid (npm)
- Nov 13, 2025
Malicious code in build-neptunology-neptunology-adonis (npm)
- Nov 13, 2025
Malicious code in build-hapi-registry-quark (npm)
- Nov 13, 2025
Malicious code in build-geoarchaeology-mutation-library (npm)
- Nov 13, 2025
Malicious code in build-farout-cz-conventional-changelog-rocket (npm)
- Nov 13, 2025
Malicious code in build-enceladus-supernova-joviology (npm)
- Nov 13, 2025
Malicious code in build-eleventy-deneb-gemini (npm)
- Nov 13, 2025
Malicious code in build-commitlint-config-angular-lithosphere-string (npm)
- Nov 13, 2025
Malicious code in buffer-package-bionics-graphql (npm)
- Nov 13, 2025
Malicious code in buffer-mocha-astrophysics-technosignature (npm)
- Nov 13, 2025
Malicious code in buffer-css-loader-draco-sirius (npm)
- Nov 13, 2025
Malicious code in buffer-apex-paleontology-cli (npm)
- Nov 13, 2025
Malicious code in buffer-aldebaran-norma-test (npm)
- Nov 13, 2025
Malicious code in browserify-seismology-vega-quito (npm)
- Nov 13, 2025
Malicious code in browserify-sedna-apollo-airbnb (npm)
- Nov 13, 2025
Malicious code in browserify-nodemon-proxima-markdown (npm)
- Nov 13, 2025
Malicious code in browserify-izar-archaeogenetics-darkmatter (npm)
- Nov 13, 2025
Malicious code in browserify-eslint-plugin-heka-mui (npm)
- Nov 13, 2025
Malicious code in browserify-cosmiconfig-testcafe-await (npm)
- Nov 13, 2025
Malicious code in browserify-astrometry-stratigraphy-foundation (npm)
- Nov 13, 2025
Malicious code in brane-venus-betelgeuse-altair (npm)
- Nov 13, 2025
Malicious code in brane-pm2-isostasy-jekyll (npm)
- Nov 13, 2025
Malicious code in brane-nashira-cluster-spawn (npm)
- Nov 13, 2025
Malicious code in brane-mocha-elektra-farout (npm)
- Nov 13, 2025
Malicious code in brane-kardashevscale-coronalmassejection-izar (npm)
- Nov 13, 2025
Malicious code in brane-halley-solarnebula-stratosphere (npm)
- Nov 13, 2025
Malicious code in boson-style-loader-less-loader-superflare (npm)
- Nov 13, 2025
Malicious code in boson-module-subscription-scripts (npm)
- Nov 13, 2025
Malicious code in boson-hugo-cosmology-mineralogy (npm)
- Nov 13, 2025
Malicious code in boson-fornax-redshift-andromeda (npm)
- Nov 13, 2025
Malicious code in boson-forever-leda-pegasus (npm)
Page 366 of 4,815