Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in await-supercluster-prosthetics-postcss-loader (npm)
- Nov 13, 2025
Malicious code in await-rate-limiter-ophiuchus-chai (npm)
- Nov 13, 2025
Malicious code in await-pm2-quito-meteor (npm)
- Nov 13, 2025
Malicious code in await-mesosphere-meissa-halley (npm)
- Nov 13, 2025
Malicious code in await-lacerta-ganymede-commitizen (npm)
- Nov 13, 2025
Malicious code in await-jwt-vuetify-event (npm)
- Nov 13, 2025
Malicious code in await-husky-electron-builder-superagent (npm)
- Nov 13, 2025
Malicious code in await-float-optimize-route-omicron (npm)
- Nov 13, 2025
Malicious code in await-file-public-transpile-static (npm)
- Nov 13, 2025
Malicious code in await-figures-nodemon-genomics (npm)
- Nov 13, 2025
Malicious code in await-async-cluster-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in avior-sails-tethys-kronos (npm)
- Nov 13, 2025
Malicious code in avior-quasar-comet-bootstrap (npm)
- Nov 13, 2025
Malicious code in avior-nconf-docusaurus-lint-staged (npm)
- Nov 13, 2025
Malicious code in avior-gulp-sagitta-ganymede (npm)
- Nov 13, 2025
Malicious code in avior-ganymede-backend-hexo (npm)
- Nov 13, 2025
Malicious code in avior-biotechnology-supernova-bootes (npm)
- Nov 13, 2025
Malicious code in avior-backend-technocracy-indus (npm)
- Nov 13, 2025
Malicious code in avior-atlas-draco-websockets (npm)
- Nov 13, 2025
Malicious code in authorize-signal-report-omicron-decode (npm)
- Nov 13, 2025
Malicious code in authorize-sigma-stub-sun-mock (npm)
- Nov 13, 2025
Malicious code in authorize-route-signal-grid-cache (npm)
- Nov 13, 2025
Malicious code in authorize-omega-earth-abstract-assert (npm)
- Nov 13, 2025
Malicious code in authorize-node-slow-stub-daemon (npm)
- Nov 13, 2025
Malicious code in authorize-interface-psi-orchestrate-visualize (npm)
- Nov 13, 2025
Malicious code in authorize-interface-good-xi-sanitize (npm)
- Nov 13, 2025
Malicious code in authorize-grid-table-cat-fast (npm)
- Nov 13, 2025
Malicious code in authorize-float-signal-string-table (npm)
- Nov 13, 2025
Malicious code in authorize-code-bash-encrypt-abstract (npm)
- Nov 13, 2025
Malicious code in authenticate-scale-analyze-book-scale (npm)
- Nov 13, 2025
Malicious code in authenticate-function-scale-cloud-socket (npm)
- Nov 13, 2025
Malicious code in authenticate-array-cluster-mock-import (npm)
- Nov 13, 2025
Malicious code in auth0-stratigraphy-ursa-cordelia (npm)
- Nov 13, 2025
Malicious code in auth0-sociobiology-apollo-umbra (npm)
- Nov 13, 2025
Malicious code in auth0-scripts-slides-build (npm)
- Nov 13, 2025
Malicious code in auth0-iota-gridsome-meteor (npm)
- Nov 13, 2025
Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm)
- Nov 13, 2025
Malicious code in auth0-astrometry-build-decoherence (npm)
- Nov 13, 2025
Malicious code in auth0-andromeda-heka-cross-env (npm)
- Nov 13, 2025
Malicious code in auth-pm2-xo-google (npm)
- Nov 13, 2025
Malicious code in australis-wolf-archaeogenetics-virgo (npm)
- Nov 13, 2025
Malicious code in australis-prosthetics-cygnus-xerxes (npm)
- Nov 13, 2025
Malicious code in australis-geomorphology-adonis-babel (npm)
- Nov 13, 2025
Malicious code in aurora-transform-protoplanetarydisk-iota (npm)
- Nov 13, 2025
Malicious code in aurora-sync-buffer-canopus (npm)
- Nov 13, 2025
Malicious code in aurora-nodemon-whitedwarf-indus (npm)
- Nov 13, 2025
Malicious code in aurora-fusion-perseus-pm2 (npm)
- Nov 13, 2025
Malicious code in aurora-exec-nebula-titan (npm)
- Nov 13, 2025
Malicious code in auriga-uglify-js-repository-thuban (npm)
- Nov 13, 2025
Malicious code in auriga-postgres-fermion-filament (npm)
Page 371 of 4,815