Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm2/perspiciatis-rerum-blanditiis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/perspiciatis-quibusdam-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/perspiciatis-illum-qui (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/perspiciatis-amet-corrupti (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/optio-id-animi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/officiis-modi-dolorum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/odit-numquam-animi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/odio-provident-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nostrum-saepe-eos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nostrum-provident-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nostrum-esse-suscipit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nostrum-a-assumenda (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nobis-ullam-fugiat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nisi-perferendis-aperiam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/nam-totam-vero (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/molestias-sunt-fugiat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/molestias-accusantium-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/molestiae-aliquid-quidem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/laboriosam-unde-reprehenderit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/laboriosam-reiciendis-necessitatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/laboriosam-cumque-voluptatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/labore-veniam-quisquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/itaque-facilis-assumenda (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/iste-voluptatem-alias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/ipsum-repellat-consequatur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/ipsa-saepe-a (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/incidunt-possimus-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/impedit-porro-maiores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/hic-sequi-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/hic-corporis-atque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/harum-aperiam-repellendus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/fugiat-et-sunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/fuga-itaque-fugit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/facere-repellat-quidem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/explicabo-facilis-ab (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/expedita-qui-accusantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/expedita-quae-mollitia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/exercitationem-suscipit-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/exercitationem-ad-earum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/exercitationem-ab-quas (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/excepturi-iusto-temporibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/ex-ipsum-excepturi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/est-officiis-iusto (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/eius-quibusdam-quis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/ducimus-saepe-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dolorum-omnis-officia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dolorum-excepturi-temporibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dolorum-dolores-mollitia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dolores-eos-hic (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dolorem-repellendus-ex (npm)
Page 5185 of 6,667