Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,745 total in npm · sorted newest first- Nov 13, 2025
Malicious code in apollo-spinner-solis-rigel (npm)
- Nov 13, 2025
Malicious code in apollo-slides-duplex-fornax (npm)
- Nov 13, 2025
Malicious code in apollo-sirius-upgrade-iota (npm)
- Nov 13, 2025
Malicious code in apollo-redgiant-kardashevscale-pino (npm)
- Nov 13, 2025
Malicious code in apollo-nodejs-helmet-loglevel (npm)
- Nov 13, 2025
Malicious code in apollo-ini-grunt-radiant (npm)
- Nov 13, 2025
Malicious code in apollo-geochronology-stream-readable (npm)
- Nov 13, 2025
Malicious code in apollo-ganymede-algol-impulse (npm)
- Nov 13, 2025
Malicious code in apollo-eigenstate-redis-dendrochronology (npm)
- Nov 13, 2025
Malicious code in apollo-dotenv-parse-variables-stratigraphy-private (npm)
- Nov 13, 2025
Malicious code in apollo-development-cressida-umbriel (npm)
- Nov 13, 2025
Malicious code in apollo-ceres-package-cors (npm)
- Nov 13, 2025
Malicious code in apollo-areology-tardigrade-tailwindcss (npm)
- Nov 13, 2025
Malicious code in apollo-aldebaran-miranda-install (npm)
- Nov 13, 2025
Malicious code in apex-tool-colors-cz-conventional-changelog (npm)
- Nov 13, 2025
Malicious code in apex-titan-babel-flare (npm)
- Nov 13, 2025
Malicious code in apex-soap-restart-nightwatch (npm)
- Nov 13, 2025
Malicious code in apex-postgres-procyon-zenobia (npm)
- Nov 13, 2025
Malicious code in apex-gulp-npm-dione (npm)
- Nov 13, 2025
Malicious code in apex-fork-jupiter-winston (npm)
- Nov 13, 2025
Malicious code in apex-electron-protractor-mini-css-extract-plugin (npm)
- Nov 13, 2025
Malicious code in apex-charon-lyra-quito (npm)
- Nov 13, 2025
Malicious code in apex-aurora-xml-fomalhaut (npm)
- Nov 13, 2025
Malicious code in apex-archaeometry-darkenergy-deneb (npm)
- Nov 13, 2025
Malicious code in apex-antares-polaris-cosmology (npm)
- Nov 13, 2025
Malicious code in antimatter-slidev-install-void (npm)
- Nov 13, 2025
Malicious code in antimatter-pino-celeste-dynamo (npm)
- Nov 13, 2025
Malicious code in antimatter-exoplanetology-convict-update (npm)
- Nov 13, 2025
Malicious code in antimatter-celeste-meissa-cryptography (npm)
- Nov 13, 2025
Malicious code in antd-style-loader-miranda-uninstall (npm)
- Nov 13, 2025
Malicious code in antd-playwright-ichnology-technocracy (npm)
- Nov 13, 2025
Malicious code in antd-node-sass-zenobia-eris (npm)
- Nov 13, 2025
Malicious code in antares-thermochronology-parallax-blackhole (npm)
- Nov 13, 2025
Malicious code in antares-terser-regulus-gravity (npm)
- Nov 13, 2025
Malicious code in antares-superflare-transform-blackhole (npm)
- Nov 13, 2025
Malicious code in antares-quasarjet-winston-superflare (npm)
- Nov 13, 2025
Malicious code in antares-procyon-xenon-solis (npm)
- Nov 13, 2025
Malicious code in antares-planckscale-helmet-module (npm)
- Nov 13, 2025
Malicious code in antares-parallax-publish-innercore (npm)
- Nov 13, 2025
Malicious code in antares-mui-tailwindcss-cross-env (npm)
- Nov 13, 2025
Malicious code in antares-luminescence-phoebe-higgs (npm)
- Nov 13, 2025
Malicious code in antares-jsonp-charon-europa (npm)
- Nov 13, 2025
Malicious code in antares-jasmine-rocket-start (npm)
- Nov 13, 2025
Malicious code in antares-iota-mysql-start (npm)
- Nov 13, 2025
Malicious code in antares-genomics-grus-planetology (npm)
- Nov 13, 2025
Malicious code in antares-cluster-ursa-javascript (npm)
- Nov 13, 2025
Malicious code in antares-bunyan-apollo-deimos (npm)
- Nov 13, 2025
Malicious code in antares-aurora-mocha-corvus (npm)
- Nov 13, 2025
Malicious code in antares-asteroid-quantum-helmet (npm)
- Nov 13, 2025
Malicious code in antares-apex-robotics-quito (npm)
Page 375 of 4,815