Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,745 total in npm · sorted newest first- Nov 13, 2025
Malicious code in airbnb-nconf-redis-jwt (npm)
- Nov 13, 2025
Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)
- Nov 13, 2025
Malicious code in airbnb-mensa-geochemistry-husky (npm)
- Nov 13, 2025
Malicious code in airbnb-australis-inflation-changelog (npm)
- Nov 13, 2025
Malicious code in airbnb-ariel-spectroscopy-ursa (npm)
- Nov 13, 2025
Malicious code in airbnb-arcturus-enif-kastra (npm)
- Nov 13, 2025
Malicious code in air-query-sun-void-debug (npm)
- Nov 13, 2025
Malicious code in air-minify-load-secure-encode (npm)
- Nov 13, 2025
Malicious code in air-epsilon-zeta-key-bundle (npm)
- Nov 13, 2025
Malicious code in air-easy-dog-float-interface (npm)
- Nov 13, 2025
Malicious code in aether-vuepress-gatsby-schema (npm)
- Nov 13, 2025
Malicious code in aether-tachyon-geochronology-janus (npm)
- Nov 13, 2025
Malicious code in aether-start-lepton-mdx (npm)
- Nov 13, 2025
Malicious code in aether-radiometric-sedna-phoebe (npm)
- Nov 13, 2025
Malicious code in aether-quantum-computing-koa-xanadu (npm)
- Nov 13, 2025
Malicious code in aether-pulsar-polaris-aldebaran (npm)
- Nov 13, 2025
Malicious code in aether-procyon-charon-spectron-webdriver (npm)
- Nov 13, 2025
Malicious code in aether-mui-postgres-mira (npm)
- Nov 13, 2025
Malicious code in aether-hologram-genomics-xanthus (npm)
- Nov 13, 2025
Malicious code in aether-foundation-request-tectonophysics (npm)
- Nov 13, 2025
Malicious code in aether-dione-test-markdown-pdf (npm)
- Nov 13, 2025
Malicious code in adonis-tectonophysics-tectonic-helmet (npm)
- Nov 13, 2025
Malicious code in adonis-prettier-stylelint-ignite-magellan (npm)
- Nov 13, 2025
Malicious code in adonis-cosmos-eslint-plugin-izar (npm)
- Nov 13, 2025
Malicious code in adonis-comet-sedna-geomorphology (npm)
- Nov 13, 2025
Malicious code in adonis-child-process-pegasus-repository (npm)
- Nov 13, 2025
Malicious code in achernar-zenith-ultra-joviology (npm)
- Nov 13, 2025
Malicious code in achernar-ursa-server-testcafe (npm)
- Nov 13, 2025
Malicious code in achernar-oberon-lint-staged-config (npm)
- Nov 13, 2025
Malicious code in achernar-hermes-centauri-module (npm)
- Nov 13, 2025
Malicious code in achernar-elara-flare-lyra (npm)
- Nov 13, 2025
Malicious code in accretion-kastra-nightmare-module (npm)
- Nov 13, 2025
Malicious code in accretion-avior-radiometric-fetch (npm)
- Nov 13, 2025
Malicious code in acamar-xenon-eslint-magellan (npm)
- Nov 13, 2025
Malicious code in acamar-prettier-stylelint-run-script-hapi (npm)
- Nov 13, 2025
Malicious code in acamar-postgres-gammarayburst-astrophysics (npm)
- Nov 13, 2025
Malicious code in acamar-higgs-izar-deneb (npm)
- Nov 13, 2025
Malicious code in acamar-halley-eclipse-kronos (npm)
- Nov 13, 2025
Malicious code in acamar-comet-flare-robotics (npm)
- Nov 13, 2025
Malicious code in acamar-child-process-oauth-nodejs (npm)
- Nov 13, 2025
Malicious code in abstract-wind-sed-void-chi (npm)
- Nov 13, 2025
Malicious code in abstract-mu-kappa-authenticate-decode (npm)
- Nov 13, 2025
Malicious code in abstract-interface-stub-delta-cloud (npm)
- Nov 13, 2025
Malicious code in abstract-hash-key-report-load (npm)
- Nov 13, 2025
Malicious code in abstract-decrypt-async-public-phi (npm)
- Nov 13, 2025
Malicious code in ablation-semantic-ui-readable-xerxes (npm)
- Nov 13, 2025
Malicious code in ablation-scripts-pino-terraforming (npm)
- Nov 13, 2025
Malicious code in ablation-rigel-phoenix-despina (npm)
- Nov 13, 2025
Malicious code in ablation-entanglement-got-epigenetics (npm)
- Nov 13, 2025
Malicious code in abiogenesis-version-magnetosphere-typeorm (npm)
Page 377 of 4,815