Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,745 total in npm · sorted newest first- Nov 13, 2025
Malicious code in astrophysics-prosthetics-callback-deneb (npm)
- Nov 13, 2025
Malicious code in astrophysics-mesosphere-neptunology-xml (npm)
- Nov 13, 2025
Malicious code in astrophysics-extremophile-library-bulma (npm)
- Nov 13, 2025
Malicious code in astrometry-request-semantic-ui-hermes (npm)
- Nov 13, 2025
Malicious code in astrometry-postcss-loader-mineralogy-uninstall (npm)
- Nov 13, 2025
Malicious code in astrometry-passport-less-filament (npm)
- Nov 13, 2025
Malicious code in astrometry-kaus-on-cli (npm)
- Nov 13, 2025
Malicious code in astrometry-halley-auriga-cressida (npm)
- Nov 13, 2025
Malicious code in astroinformatics-ethology-venus-slidev (npm)
- Nov 13, 2025
Malicious code in astroinformatics-brane-firebase-socketio (npm)
- Nov 13, 2025
Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)
- Nov 13, 2025
Malicious code in astrochemistry-selenium-solis-frontend (npm)
- Nov 13, 2025
Malicious code in astrochemistry-rigel-csrf-cosmicweb (npm)
- Nov 13, 2025
Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)
- Nov 13, 2025
Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm)
- Nov 13, 2025
Malicious code in astrochemistry-aldebaran-update-antd (npm)
- Nov 13, 2025
Malicious code in astrobiology-sedna-archaeogenetics-css-minimizer-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in astrobiology-postgres-comet-vega (npm)
- Nov 13, 2025
Malicious code in astrobiology-loopback-hermes-duplex (npm)
- Nov 13, 2025
Malicious code in astrobiology-flare-repository-cluster (npm)
- Nov 13, 2025
Malicious code in astrobiology-brane-cosmicsilence-superflare (npm)
- Nov 13, 2025
Malicious code in astrobiology-andromeda-lightyear-astrometry (npm)
- Nov 13, 2025
Malicious code in astro-photon-publish-blazar (npm)
- Nov 13, 2025
Malicious code in astro-ignite-scripts-pulsar (npm)
- Nov 13, 2025
Malicious code in astro-helios-nightwatch-sagitta (npm)
- Nov 13, 2025
Malicious code in astro-cors-pulsar-neutrino (npm)
- Nov 13, 2025
Malicious code in asthenosphere-package-eridanus-restart (npm)
- Nov 13, 2025
Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)
- Nov 13, 2025
Malicious code in asthenosphere-auth-andromeda-gacrux (npm)
- Nov 13, 2025
Malicious code in asteroid-winston-eclipse-hugo (npm)
- Nov 13, 2025
Malicious code in asteroid-cors-bulma-paleoclimatology (npm)
- Nov 13, 2025
Malicious code in assert-zeta-visualize-data-char (npm)
- Nov 13, 2025
Malicious code in assert-float-private-process-star (npm)
- Nov 13, 2025
Malicious code in assert-analyze-authorize-awk-eta (npm)
- Nov 13, 2025
Malicious code in assert-alpha-boolean-awk-mock (npm)
- Nov 13, 2025
Malicious code in asjustmeteai (npm)
- Nov 13, 2025
Malicious code in ashjustmeteai (npm)
- Nov 13, 2025
Malicious code in array-upsilon-decrypt-container-object (npm)
- Nov 13, 2025
Malicious code in array-stack-awk-emulate-promise (npm)
- Nov 13, 2025
Malicious code in array-simple-water-tau-book (npm)
- Nov 13, 2025
Malicious code in array-public-code-async-decompress (npm)
- Nov 13, 2025
Malicious code in array-load-sandbox-code-cache (npm)
- Nov 13, 2025
Malicious code in array-eta-sudo-new-cron (npm)
- Nov 13, 2025
Malicious code in array-benchmark-socket-dog-fork (npm)
- Nov 13, 2025
Malicious code in array-async-export-lambda-transpile (npm)
- Nov 13, 2025
Malicious code in ariel-xenos-dione-orbit (npm)
- Nov 13, 2025
Malicious code in ariel-virgo-husky-pino (npm)
- MAL-2025-185562Malwarenpmariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdownNov 13, 2025
Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)
- Nov 13, 2025
Malicious code in ariel-markdown-arcturus-terser-webpack-plugin (npm)
- Nov 13, 2025
Malicious code in ariel-geckodriver-stratosphere-fetch (npm)
Page 373 of 4,815