Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,736 total in npm · sorted newest first- Nov 13, 2025
Malicious code in auriga-parcel-soap-nashira (npm)
- Nov 13, 2025
Malicious code in auriga-inquirer-tailwindcss-winston (npm)
- Nov 13, 2025
Malicious code in auriga-eslint-halley-fetch (npm)
- Nov 13, 2025
Malicious code in augmentedreality-version-wavefunction-spawn (npm)
- Nov 13, 2025
Malicious code in augmentedreality-vega-chai-cosmogenic (npm)
- Nov 13, 2025
Malicious code in augmentedreality-update-tethys-dynamo (npm)
- Nov 13, 2025
Malicious code in augmentedreality-mesosphere-style-loader-registry (npm)
- Nov 13, 2025
Malicious code in augmentedreality-frontend-cz-conventional-changelog-neptunology (npm)
- Nov 13, 2025
Malicious code in augmentedreality-fetch-gravity-hawkingradiation (npm)
- Nov 13, 2025
Malicious code in atlas-standard-ursa-auth0 (npm)
- Nov 13, 2025
Malicious code in atlas-repository-nova-eclipse (npm)
- Nov 13, 2025
Malicious code in atlas-ophiuchus-palynology-bunyan (npm)
- Nov 13, 2025
Malicious code in atlas-nanotechnology-polaris-meissa (npm)
- Nov 13, 2025
Malicious code in atlas-miranda-jabbah-oberon (npm)
- Nov 13, 2025
Malicious code in atlas-enif-enif-winston (npm)
- Nov 13, 2025
Malicious code in atlas-browserify-rigel-mira (npm)
- Nov 13, 2025
Malicious code in async-yonder-void-gravity (npm)
- Nov 13, 2025
Malicious code in async-yonder-hadron-meteor (npm)
- Nov 13, 2025
Malicious code in async-xerxes-filament-outercore (npm)
- Nov 13, 2025
Malicious code in async-virtualize-private-link-view (npm)
- Nov 13, 2025
Malicious code in async-registry-build-xml (npm)
- Nov 13, 2025
Malicious code in async-readable-solis-leda (npm)
- Nov 13, 2025
Malicious code in async-public-eslint-plugin-loop (npm)
- Nov 13, 2025
Malicious code in async-psi-alpha-query-theta (npm)
- Nov 13, 2025
Malicious code in async-proxy-dog-refactor-nu (npm)
- Nov 13, 2025
Malicious code in async-parse-compile-sanitize-quick (npm)
- Nov 13, 2025
Malicious code in async-lynx-lithosphere-telesto (npm)
- Nov 13, 2025
Malicious code in async-kastra-archaeoastronomy-exobiology (npm)
- Nov 13, 2025
Malicious code in async-iota-pavo-quasar (npm)
- Nov 13, 2025
Malicious code in async-integer-xml-void-tau (npm)
- Nov 13, 2025
Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)
- Nov 13, 2025
Malicious code in async-graviton-webdriverio-quantum (npm)
- Nov 13, 2025
Malicious code in async-eta-try-balance-java (npm)
- Nov 13, 2025
Malicious code in async-encrypt-void-user-upsilon (npm)
- Nov 13, 2025
Malicious code in async-dotenv-pino-pretty-odin (npm)
- Nov 13, 2025
Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant (npm)
- Nov 13, 2025
Malicious code in async-cressida-umbra-vuepress (npm)
- Nov 13, 2025
Malicious code in async-command-farout-hexo (npm)
- Nov 13, 2025
Malicious code in async-cluster-await-io (npm)
- Nov 13, 2025
Malicious code in async-buffer-cosmiconfig-aquarius (npm)
- Nov 13, 2025
Malicious code in astrophysics-triton-nightwatch-express (npm)
- Nov 13, 2025
Malicious code in astrophysics-prosthetics-callback-deneb (npm)
- Nov 13, 2025
Malicious code in astrophysics-mesosphere-neptunology-xml (npm)
- Nov 13, 2025
Malicious code in astrophysics-extremophile-library-bulma (npm)
- Nov 13, 2025
Malicious code in astrometry-request-semantic-ui-hermes (npm)
- Nov 13, 2025
Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm)
- Nov 13, 2025
Malicious code in astrometry-passport-less-filament (npm)
- Nov 13, 2025
Malicious code in astrometry-kaus-on-cli (npm)
- Nov 13, 2025
Malicious code in astrometry-halley-auriga-cressida (npm)
- Nov 13, 2025
Malicious code in astroinformatics-ethology-venus-slidev (npm)
Page 372 of 4,815