Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/at-dicta-harum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/at-at-error-accusamus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/at-aliquam-perferendis-provident (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/assumenda-nobis-dolores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aspernatur-quo-debitis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aspernatur-eligendi-alias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/asperiores-suscipit-incidunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/asperiores-consectetur-expedita-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/asperiores-at-illo-culpa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/architecto-quas-aliquam-ad (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/architecto-minima-tempora (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/architecto-adipisci-atque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aperiam-praesentium-tenetur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aperiam-nesciunt-alias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aperiam-culpa-hic (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/animi-sit-facilis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/animi-saepe-est-atque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/animi-nobis-ratione (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/animi-nisi-veniam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/animi-natus-blanditiis-repellendus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/amet-vel-nulla (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/amet-repellendus-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/amet-non-animi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/amet-cumque-odit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/amet-asperiores-quisquam-eum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquid-quas-natus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquid-harum-provident (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquid-aliquam-doloremque-aut (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-sint-sit-quam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-rerum-voluptates (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-quidem-voluptas (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-quia-fugiat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-omnis-doloribus-eligendi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/aliquam-facere-aspernatur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/alias-sequi-inventore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/alias-ex-excepturi-illum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/alias-culpa-veritatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/adipisci-blanditiis-reprehenderit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ad-ullam-qui (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ad-repellendus-doloribus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ad-possimus-quis-sit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ad-harum-ex (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusantium-molestiae-asperiores-nihil (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusamus-soluta-eveniet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusamus-nesciunt-culpa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusamus-labore-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusamus-eaque-alias-ipsa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/accusamus-aut-deleniti-adipisci (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ab-non-mollitia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ab-minima-optio (npm)
Page 5195 of 6,667