Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,745 total in npm · sorted newest first- Nov 13, 2025
Malicious code in ariel-callisto-commitlint-config-angular-install (npm)
- Nov 13, 2025
Malicious code in ariel-blitz-rocket-concurrently (npm)
- Nov 13, 2025
Malicious code in ariel-backend-css-loader-aldebaran (npm)
- Nov 13, 2025
Malicious code in areology-polaris-gatsby-phoebe (npm)
- Nov 13, 2025
Malicious code in areology-express-kuiperbelt-gacrux (npm)
- Nov 13, 2025
Malicious code in areology-eleventy-cassini-filament (npm)
- Nov 13, 2025
Malicious code in areology-darkmatter-ablation-thermochronology (npm)
- Nov 13, 2025
Malicious code in areology-atlas-dotenv-safe-greatfilter (npm)
- Nov 13, 2025
Malicious code in arcturus-venus-loop-cressida (npm)
- Nov 13, 2025
Malicious code in arcturus-sails-version-atlas (npm)
- Nov 13, 2025
Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)
- Nov 13, 2025
Malicious code in arcturus-phenomic-glaciology-promise (npm)
- Nov 13, 2025
Malicious code in arcturus-nuxtjs-cordelia-run-script (npm)
- Nov 13, 2025
Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)
- Nov 13, 2025
Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)
- Nov 13, 2025
Malicious code in arcturus-iota-auth-blaze (npm)
- Nov 13, 2025
Malicious code in arcturus-fornax-thuban-fetch (npm)
- Nov 13, 2025
Malicious code in arcturus-flare-superagent-sedna (npm)
- Nov 13, 2025
Malicious code in arcturus-centauri-iota-puppeteer (npm)
- Nov 13, 2025
Malicious code in arcturus-bellatrix-standard-miranda (npm)
- Nov 13, 2025
Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm)
- Nov 13, 2025
Malicious code in archaeometry-rollup-plugin-astro-install (npm)
- Nov 13, 2025
Malicious code in archaeometry-impulse-galaxy-dysonswarm (npm)
- Nov 13, 2025
Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm)
- Nov 13, 2025
Malicious code in archaeometry-europa-asthenosphere-run-script (npm)
- Nov 13, 2025
Malicious code in archaeometry-cordelia-capella-dotenv (npm)
- Nov 13, 2025
Malicious code in archaeometry-command-iota-octans (npm)
- Nov 13, 2025
Malicious code in archaeometry-airbnb-mira-ophiuchus (npm)
- Nov 13, 2025
Malicious code in archaeometry-accretion-avior-panspermia (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-xenos-telesto-tectonophysics (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-typeorm-superagent-event (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-tardigrade-filament-boson (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-taphonomy-blazar-singularitarianism (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-semantic-ui-weywot-gravity (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-ganymede-paleoceanography-ignite (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)
- Nov 13, 2025
Malicious code in archaeogenetics-astrochemistry-quark-chakra-ui (npm)
- Nov 13, 2025
Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm)
- Nov 13, 2025
Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)
- Nov 13, 2025
Malicious code in archaeoastronomy-epigenetics-proteomics-request (npm)
- Nov 13, 2025
Malicious code in archaeoastronomy-blaze-panspermia-quark (npm)
- Nov 13, 2025
Malicious code in archaeoastronomy-biosignature-phoebe-metabolomics (npm)
- Nov 13, 2025
Malicious code in aquarius-slidev-equinox-procyon (npm)
- Nov 13, 2025
Malicious code in aquarius-relay-pulsar-eslint-config (npm)
- Nov 13, 2025
Malicious code in aquarius-quark-materialize-juno (npm)
- Nov 13, 2025
Malicious code in aquarius-jsonp-technocracy-bulma (npm)
- Nov 13, 2025
Malicious code in aquarius-configstore-eclipse-celeste (npm)
- Nov 13, 2025
Malicious code in aquarius-babel-nconf-build (npm)
- Nov 13, 2025
Malicious code in apollo-xo-bulma-radiant (npm)
- Nov 13, 2025
Malicious code in apollo-webdriver-manager-jasmine-wasat (npm)
Page 374 of 4,815