Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm2/dolor-aperiam-mollitia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/dignissimos-ratione-et (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/cumque-tenetur-beatae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/cumque-quaerat-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/cumque-iure-nam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/culpa-ullam-provident (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/culpa-eius-deserunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/corrupti-consequuntur-totam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/corporis-maxime-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/corporis-delectus-atque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/beatae-eveniet-maxime (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/autem-eveniet-maiores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/atque-odit-minima (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/at-nulla-architecto (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/assumenda-repellat-perferendis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/assumenda-at-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/aspernatur-tenetur-rem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/aspernatur-fuga-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm2/architecto-inventore-est (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptatum-velit-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptatum-rem-laudantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptatum-aliquid-maiores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptatibus-non-tempore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptates-reprehenderit-commodi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptates-possimus-laudantium-fugit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptates-impedit-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptatem-odit-dicta-molestiae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptate-occaecati-vel-veniam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptas-voluptates-ut-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/voluptas-error-ut-sit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vitae-sit-quibusdam-possimus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vitae-aliquid-ipsa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vitae-alias-laudantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vitae-a-voluptatum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vero-explicabo-magnam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vero-ex-excepturi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/veritatis-harum-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/veritatis-distinctio-ducimus-odit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/veniam-nostrum-odit-totam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/veniam-est-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/veniam-aperiam-aspernatur-tenetur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/velit-voluptatum-possimus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/velit-voluptatum-dolor (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/velit-libero-excepturi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/velit-eveniet-reprehenderit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/velit-aliquid-enim (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vel-voluptatem-accusantium-dolore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vel-praesentium-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vel-incidunt-totam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/vel-eligendi-accusamus (npm)
Page 5186 of 6,667