Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in barnard-soap-gravitationalwave-meissa (npm)
- Nov 13, 2025
Malicious code in barnard-perseus-comet-chromedriver (npm)
- Nov 13, 2025
Malicious code in barnard-octans-development-async (npm)
- Nov 13, 2025
Malicious code in barnard-kronos-rate-limiter-phoenix (npm)
- Nov 13, 2025
Malicious code in balance-quick-throw-bash-scale (npm)
- Nov 13, 2025
Malicious code in balance-public-new-object-nu (npm)
- Nov 13, 2025
Malicious code in balance-dog-throw-balance-daemon (npm)
- Nov 13, 2025
Malicious code in balance-decompress-authorize-query-thread (npm)
- Nov 13, 2025
Malicious code in balance-char-byte-final-big (npm)
- Nov 13, 2025
Malicious code in bad-xml-simple-yaml-reject (npm)
- Nov 13, 2025
Malicious code in bad-transpile-xml-signal-cache (npm)
- Nov 13, 2025
Malicious code in bad-stub-key-fast-minify (npm)
- Nov 13, 2025
Malicious code in bad-route-boolean-compress-float (npm)
- Nov 13, 2025
Malicious code in bad-old-deserialize-bundle-boolean (npm)
- Nov 13, 2025
Malicious code in bad-key-short-sudo-resolve (npm)
- Nov 13, 2025
Malicious code in bad-kappa-spy-fire-error (npm)
- Nov 13, 2025
Malicious code in bad-info-encrypt-boolean-simple (npm)
- Nov 13, 2025
Malicious code in bad-hash-shell-interpret-compress (npm)
- Nov 13, 2025
Malicious code in bad-grep-web-private-cat (npm)
- Nov 13, 2025
Malicious code in bad-eta-encrypt-error-signal (npm)
- Nov 13, 2025
Malicious code in bad-cron-easy-daemon-compile (npm)
- Nov 13, 2025
Malicious code in bad-alert-long-container-mu (npm)
- Nov 13, 2025
Malicious code in backend-nashira-rate-limiter-chromedriver (npm)
- Nov 13, 2025
Malicious code in backend-exec-husky-public (npm)
- Nov 13, 2025
Malicious code in backend-enif-gulp-titan (npm)
- Nov 13, 2025
Malicious code in backend-crust-cordelia-markdown-pdf (npm)
- Nov 13, 2025
Malicious code in babel-singularity-got-hadron (npm)
- Nov 13, 2025
Malicious code in babel-ophiuchus-mira-bellatrix (npm)
- Nov 13, 2025
Malicious code in babel-isostasy-fork-buffer (npm)
- Nov 13, 2025
Malicious code in babel-init-changelog-algol (npm)
- Nov 13, 2025
Malicious code in babel-electron-builder-hexo-nightmare (npm)
- Nov 13, 2025
Malicious code in babel-dynamo-loop-terraforming (npm)
- Nov 13, 2025
Malicious code in babel-baryon-magellan-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in babel-babel-config-quark (npm)
- Nov 13, 2025
Malicious code in axios-string-kinetic-xenon (npm)
- Nov 13, 2025
Malicious code in axios-neutrino-fomalhaut-perturbation (npm)
- Nov 13, 2025
Malicious code in axios-mineralogy-pyxis-janus (npm)
- Nov 13, 2025
Malicious code in axios-envconfig-antimatter-xenos (npm)
- Nov 13, 2025
Malicious code in axios-astro-html-webpack-plugin-algol (npm)
- Nov 13, 2025
Malicious code in axios-algol-wolf-upgrade (npm)
- Nov 13, 2025
Malicious code in awk-validate-function-refactor-delta (npm)
- Nov 13, 2025
Malicious code in awk-sun-deploy-key-omega (npm)
- Nov 13, 2025
Malicious code in awk-node-public-interpret-cron (npm)
- Nov 13, 2025
Malicious code in awk-node-abstract-interpret-alert (npm)
- Nov 13, 2025
Malicious code in awk-mock-rain-enum-pi (npm)
- Nov 13, 2025
Malicious code in awk-minify-minify-proxy-omicron (npm)
- Nov 13, 2025
Malicious code in awk-eta-virtualize-route-route (npm)
- Nov 13, 2025
Malicious code in awk-encode-good-byte-uglify (npm)
- Nov 13, 2025
Malicious code in await-tree-cat-omega-authenticate (npm)
- Nov 13, 2025
Malicious code in await-throw-psi-simple-debug (npm)
Page 370 of 4,815