Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,367 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @pcid/storage-utils (npm)
- Aug 14, 2025
Malicious code in @paysol-widgets/ts-client (npm)
- Aug 14, 2025
Malicious code in @paysol-widgets/client (npm)
- Aug 14, 2025
Malicious code in @paysol-widgets/api-client (npm)
- Aug 14, 2025
Malicious code in @patrten/voluptatibus-odit-suscipit (npm)
- Aug 14, 2025
Malicious code in @patrten/voluptate-quasi-facilis-minima (npm)
- Aug 14, 2025
Malicious code in @patrten/voluptas-perspiciatis-id (npm)
- Aug 14, 2025
Malicious code in @patrten/vero-unde (npm)
- Aug 14, 2025
Malicious code in @patrten/vero-corrupti-id-labore (npm)
- Aug 14, 2025
Malicious code in @patrten/velit-cum (npm)
- Aug 14, 2025
Malicious code in @patrten/ullam-aspernatur-distinctio-aut (npm)
- Aug 14, 2025
Malicious code in @patrten/temporibus-maiores (npm)
- Aug 14, 2025
Malicious code in @patrten/soluta-molestias (npm)
- Aug 14, 2025
Malicious code in @patrten/sit-iusto-amet-nulla (npm)
- Aug 14, 2025
Malicious code in @patrten/sint-eos-eveniet (npm)
- Aug 14, 2025
Malicious code in @patrten/sapiente-consequuntur (npm)
- Aug 14, 2025
Malicious code in @patrten/rerum-cum-repellat-iste (npm)
- Aug 14, 2025
Malicious code in @patrten/repellat-vero (npm)
- Aug 14, 2025
Malicious code in @patrten/ratione-minus (npm)
- Aug 14, 2025
Malicious code in @patrten/quo-illum-mollitia (npm)
- Aug 14, 2025
Malicious code in @patrten/quis-cum (npm)
- Aug 14, 2025
Malicious code in @patrten/quasi-minus-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @patrten/quam-rem-voluptatum (npm)
- Aug 14, 2025
Malicious code in @patrten/quam-libero-quidem (npm)
- Aug 14, 2025
Malicious code in @patrten/quam-in-tempore (npm)
- Aug 14, 2025
Malicious code in @patrten/quaerat-nihil-architecto (npm)
- Aug 14, 2025
Malicious code in @patrten/praesentium-harum-possimus (npm)
- Aug 14, 2025
Malicious code in @patrten/officiis-mollitia-ab (npm)
- Aug 14, 2025
Malicious code in @patrten/odit-voluptas-porro-facilis (npm)
- Aug 14, 2025
Malicious code in @patrten/odit-id (npm)
- Aug 14, 2025
Malicious code in @patrten/odio-maxime-nisi (npm)
- Aug 14, 2025
Malicious code in @patrten/nostrum-impedit-cumque (npm)
- Aug 14, 2025
Malicious code in @patrten/nobis-magni-odit-laudantium (npm)
- Aug 14, 2025
Malicious code in @patrten/nesciunt-excepturi (npm)
- Aug 14, 2025
Malicious code in @patrten/nemo-cupiditate-labore (npm)
- Aug 14, 2025
Malicious code in @patrten/mollitia-nam (npm)
- Aug 14, 2025
Malicious code in @patrten/molestias-atque-officiis (npm)
- Aug 14, 2025
Malicious code in @patrten/minus-architecto (npm)
- Aug 14, 2025
Malicious code in @patrten/minima-id-molestias (npm)
- Aug 14, 2025
Malicious code in @patrten/maxime-quae-sint (npm)
- Aug 14, 2025
Malicious code in @patrten/laboriosam-accusantium-quaerat-exercitationem (npm)
- Aug 14, 2025
Malicious code in @patrten/itaque-hic-qui (npm)
- Aug 14, 2025
Malicious code in @patrten/inventore-explicabo (npm)
- Aug 14, 2025
Malicious code in @patrten/fugiat-voluptatibus-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @patrten/fugiat-officiis-placeat-eius (npm)
- Aug 14, 2025
Malicious code in @patrten/fuga-libero-cupiditate-nostrum (npm)
- Aug 14, 2025
Malicious code in @patrten/facilis-reprehenderit-voluptatum (npm)
- Aug 14, 2025
Malicious code in @patrten/expedita-repellendus-rerum-ab (npm)
- Aug 14, 2025
Malicious code in @patrten/exercitationem-recusandae-earum-excepturi (npm)
- Aug 14, 2025
Malicious code in @patrten/excepturi-quisquam (npm)
Page 5155 of 6,668