Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,367 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @patrten/excepturi-earum-earum-laudantium (npm)
- Aug 14, 2025
Malicious code in @patrten/excepturi-aliquam (npm)
- Aug 14, 2025
Malicious code in @patrten/esse-earum-libero (npm)
- Aug 14, 2025
Malicious code in @patrten/esse-deserunt-repellendus (npm)
- Aug 14, 2025
Malicious code in @patrten/eos-dicta (npm)
- Aug 14, 2025
Malicious code in @patrten/eligendi-cum-assumenda (npm)
- Aug 14, 2025
Malicious code in @patrten/earum-nulla-officiis (npm)
- Aug 14, 2025
Malicious code in @patrten/ea-deleniti-commodi (npm)
- Aug 14, 2025
Malicious code in @patrten/dolorum-velit-quaerat (npm)
- Aug 14, 2025
Malicious code in @patrten/dolorum-molestiae-earum-distinctio (npm)
- Aug 14, 2025
Malicious code in @patrten/dolorum-consectetur-maxime-soluta (npm)
- Aug 14, 2025
Malicious code in @patrten/dolores-porro-numquam (npm)
- Aug 14, 2025
Malicious code in @patrten/doloremque-ut-autem-excepturi (npm)
- Aug 14, 2025
Malicious code in @patrten/dolore-incidunt-similique (npm)
- Aug 14, 2025
Malicious code in @patrten/distinctio-delectus-perferendis-veritatis (npm)
- Aug 14, 2025
Malicious code in @patrten/dignissimos-laboriosam-nostrum (npm)
- Aug 14, 2025
Malicious code in @patrten/delectus-facilis (npm)
- Aug 14, 2025
Malicious code in @patrten/debitis-sint (npm)
- Aug 14, 2025
Malicious code in @patrten/debitis-ipsam-porro (npm)
- Aug 14, 2025
Malicious code in @patrten/culpa-aliquam-fugiat-eligendi (npm)
- Aug 14, 2025
Malicious code in @patrten/blanditiis-molestias-numquam (npm)
- Aug 14, 2025
Malicious code in @patrten/beatae-qui-error-corrupti (npm)
- Aug 14, 2025
Malicious code in @patrten/atque-quia-repudiandae-voluptatem (npm)
- Aug 14, 2025
Malicious code in @patrten/at-quae (npm)
- Aug 14, 2025
Malicious code in @patrten/assumenda-accusamus-cum (npm)
- Aug 14, 2025
Malicious code in @patrten/aliquam-maxime (npm)
- Aug 14, 2025
Malicious code in @patrten/alias-eligendi-ex (npm)
- Aug 14, 2025
Malicious code in @patrten/ad-id-id (npm)
- Aug 14, 2025
Malicious code in @patrten/accusantium-libero-velit-aspernatur (npm)
- Aug 14, 2025
Malicious code in @patrten/accusamus-aspernatur (npm)
- Aug 14, 2025
Malicious code in @patrten/ab-omnis-tenetur (npm)
- Aug 14, 2025
Malicious code in @patrten/a-voluptatibus-voluptate (npm)
- Aug 14, 2025
Malicious code in @partnercenter-react/ui-webcore (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in @oss-ui/capsig-legacy (npm)
- Aug 14, 2025
Malicious code in @orlserg32112/socket-test-vulndep (npm)
- Aug 14, 2025
Malicious code in @oraliepham/api-facebooknew (npm)
- Aug 14, 2025
Malicious code in @oraliepham/api-chat-fanpage-facebook (npm)
- Aug 14, 2025
Malicious code in @opensearch/datemath (npm)
- Aug 14, 2025
Malicious code in @omisepayments/session-config (npm)
- Aug 14, 2025
Malicious code in @omisepayments/keycloak-react-components (npm)
- Aug 14, 2025
Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm)
- Aug 14, 2025
Malicious code in @octo-org/octo-app (npm)
- Aug 14, 2025
Malicious code in @nstark/angular.js (npm)
- Aug 14, 2025
Malicious code in @npmteasources/magni-ipsum-quod-animi (npm)
- Aug 14, 2025
Malicious code in @npmteasources/animi-occaecati-quo-quasi (npm)
- Aug 14, 2025
Malicious code in @npmteanew/super-duper-funicular (npm)
- Aug 14, 2025
Malicious code in @npmteanew/silver-dollop (npm)
- Aug 14, 2025
Malicious code in @npmteanew/potential-octo-dollop (npm)
- Aug 14, 2025
Malicious code in @npmteanew/officiis-placeat-necessitatibus-quasi (npm)
- Aug 14, 2025
Malicious code in @npmteanew/mollitia-dignissimos-mollitia-deserunt (npm)
Page 5156 of 6,668