Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,367 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @npmteanew/literate-enigma (npm)
- Aug 14, 2025
Malicious code in @npmteanew/curly-journey (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/quam-natus-odit-ea (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/mollitia-autem-minus-error (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/labore-quia-earum-eaque (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/ipsam-quas-voluptatum-deserunt (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/illum-ipsam-magni-temporibus (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/eveniet-error-eos-repellat (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/et-eos-aperiam-suscipit (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/dolores-laborum-ipsam-minima (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/blanditiis-architecto-iusto-asperiores (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/animated-guacamole (npm)
- Aug 14, 2025
Malicious code in @npmshivamkalsi/aliquam-necessitatibus-voluptates-alias (npm)
- Aug 14, 2025
Malicious code in @npm-aditech387/public-repo-ui (npm)
- Aug 14, 2025
Malicious code in @notification-center/notification-center (npm)
- Aug 14, 2025
Malicious code in @nothingly/test (npm)
- Aug 14, 2025
Malicious code in @ninjaone/webapp (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @ng-seed/universal (npm)
- Aug 14, 2025
Malicious code in @neednova/metapod (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @neednova/enterprise-eng (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @neednova/credit-passport-supply (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @neednova/cash (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @mylong.io/jackson-candidate-app (npm)
- Aug 14, 2025
Malicious code in @my-reports/express-report (npm)
- Aug 14, 2025
Malicious code in @moonpig/web-core-utils (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @moonpig/web-core-app (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @moonpig/web-core-analytics (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @moneyguide-dev/style-provider (npm)
- Aug 14, 2025
Malicious code in @mintstudiouicore/telemetry (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @mintstudiouicore/coreutil (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @michaljaz/backdoor (npm)
- Aug 14, 2025
Malicious code in @merge-api/merge-javascript-shared (npm)
- Aug 14, 2025
Malicious code in @mediaspace/shared (npm)
- Aug 14, 2025
Malicious code in @marketing-tech/eslint-config (npm)
- Aug 14, 2025
Malicious code in @market-explorer/market-explorer (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/timer-tracker-swim (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/thebestrelay (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/test-release (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/ola-mundo (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/may-ip (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/docker-image (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/devops-helm (npm)
- Aug 14, 2025
Malicious code in @marcos_feitoza/dashboard (npm)
- Aug 14, 2025
Malicious code in @malware-test-zones-strag-grouf-paged/test-mlw3-zones-strag-grouf-paged (npm)
- Aug 14, 2025
Malicious code in @malware-test-zeros-cheep-howes-ciggy/test-mlw3-zeros-cheep-howes-ciggy (npm)
- Aug 14, 2025
Malicious code in @malware-test-zeist-guana-clefs-kaama/test-mlw3-zeist-guana-clefs-kaama (npm)
- Aug 14, 2025
Malicious code in @malware-test-yukes-tigon-grume-cling/test-mlw3-yukes-tigon-grume-cling (npm)
- Aug 14, 2025
Malicious code in @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades (npm)
- Aug 14, 2025
Malicious code in @malware-test-yores-wamus-kadis-plots/test-mlw3-yores-wamus-kadis-plots (npm)
- Aug 14, 2025
Malicious code in @malware-test-yoick-souks-alods-bajus/test-mlw3-yoick-souks-alods-bajus (npm)
Page 5157 of 6,668