Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,745 total in npm · sorted newest first- Nov 13, 2025
Malicious code in antares-airbnb-cryonics-ionosphere (npm)
- Nov 13, 2025
Malicious code in antares-aether-run-script-pino-pretty (npm)
- Nov 13, 2025
Malicious code in andromeda-webpack-nodejs-sadr (npm)
- Nov 13, 2025
Malicious code in andromeda-impulse-quasarjet-elara (npm)
- Nov 13, 2025
Malicious code in andromeda-grus-leda-leda (npm)
- Nov 13, 2025
Malicious code in analyze-signal-bundle-query-mock (npm)
- Nov 13, 2025
Malicious code in analyze-meta-error-chi-serialize (npm)
- Nov 13, 2025
Malicious code in analyze-key-simple-long-gamma (npm)
- Nov 13, 2025
Malicious code in analyze-char-fork-theta-kernel (npm)
- Nov 13, 2025
Malicious code in analyze-catch-load-nu-omicron (npm)
- Nov 13, 2025
Malicious code in analyze-boolean-pipe-import-epsilon (npm)
- Nov 13, 2025
Malicious code in analyze-abstract-hash-code-iota (npm)
- Nov 13, 2025
Malicious code in altair-genomics-firebase-janus (npm)
- Nov 13, 2025
Malicious code in altair-async-jabbah-radioastronomy (npm)
- Nov 13, 2025
Malicious code in alphard-webdriverio-titan-elektra (npm)
- Nov 13, 2025
Malicious code in alphard-supercluster-exobiology-postgres (npm)
- Nov 13, 2025
Malicious code in alphard-prettier-fusion-astrochemistry (npm)
- Nov 13, 2025
Malicious code in alphard-mui-gatsby-envconfig (npm)
- Nov 13, 2025
Malicious code in alphard-halley-ophiuchus-library (npm)
- Nov 13, 2025
Malicious code in alphard-gatsby-commitizen-node-config (npm)
- Nov 13, 2025
Malicious code in alphard-fetch-electron-builder-levels (npm)
- Nov 13, 2025
Malicious code in alphard-dynamo-antares-meteor (npm)
- Nov 13, 2025
Malicious code in alphard-comet-transport-rest (npm)
- Nov 13, 2025
Malicious code in alphard-biohacking-areology-kardashevscale (npm)
- Nov 13, 2025
Malicious code in alpha-view-grep-abstract-pipe (npm)
- Nov 13, 2025
Malicious code in alpha-sun-validate-transpile-bad (npm)
- Nov 13, 2025
Malicious code in alpha-integer-pi-assert-export (npm)
- Nov 13, 2025
Malicious code in alpha-deserialize-book-upsilon-pi (npm)
- Nov 13, 2025
Malicious code in alpha-authenticate-serialize-long-try (npm)
- Nov 13, 2025
Malicious code in algol-troposphere-bellatrix-oortcloud (npm)
- Nov 13, 2025
Malicious code in algol-elektra-rollup-style-loader (npm)
- Nov 13, 2025
Malicious code in algol-apollo-indus-extremophile (npm)
- Nov 13, 2025
Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm)
- Nov 13, 2025
Malicious code in algol-aldebaran-cressida-nodejs (npm)
- Nov 13, 2025
Malicious code in algol-airbnb-eslint-config-elara (npm)
- Nov 13, 2025
Malicious code in aldebaran-thuban-gacrux-apex (npm)
- Nov 13, 2025
Malicious code in aldebaran-stratigraphy-canopus-module (npm)
- Nov 13, 2025
Malicious code in aldebaran-resolvers-rehype-carina (npm)
- Nov 13, 2025
Malicious code in aldebaran-regulus-bellatrix-prompts (npm)
- Nov 13, 2025
Malicious code in aldebaran-quantum-babel-steganography (npm)
- Nov 13, 2025
Malicious code in aldebaran-polaris-materialize-xenobiology (npm)
- Nov 13, 2025
Malicious code in aldebaran-phoebe-sagitta-brane (npm)
- Nov 13, 2025
Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)
- Nov 13, 2025
Malicious code in aldebaran-lyra-magellan-bulma (npm)
- Nov 13, 2025
Malicious code in aldebaran-halley-eris-rollup-plugin (npm)
- Nov 13, 2025
Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)
- Nov 13, 2025
Malicious code in airbnb-titan-pavo-adonis (npm)
- Nov 13, 2025
Malicious code in airbnb-tethys-enif-nova (npm)
- Nov 13, 2025
Malicious code in airbnb-test-betelgeuse-gridsome (npm)
- Nov 13, 2025
Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm)
Page 376 of 4,815