Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in webpack-engine (npm)
- Aug 14, 2025
Malicious code in webpack-core-utils (npm)
- Aug 14, 2025
Malicious code in webpack-bootstrap-halley-ophiuchus (npm)
- Aug 14, 2025
Malicious code in webpac (npm)
- Aug 14, 2025
Malicious code in webp1nger (npm)
- Aug 14, 2025
Malicious code in webops (npm)
- Aug 14, 2025
Malicious code in webobj (npm)
- Aug 14, 2025
Malicious code in webnotes (npm)
- Aug 14, 2025
Malicious code in weblish (npm)
- Aug 14, 2025
Malicious code in webjet (npm)
- Aug 14, 2025
Malicious code in webinario (npm)
- Aug 14, 2025
Malicious code in webhooks-etl (npm)
- Aug 14, 2025
Malicious code in webhook_client (npm)
- Aug 14, 2025
Malicious code in webhealer (npm)
- Aug 14, 2025
Malicious code in webgldemo (npm)
- Aug 14, 2025
Malicious code in webgestor (npm)
- Aug 14, 2025
Malicious code in webformz (npm)
- Aug 14, 2025
Malicious code in webfeat (npm)
- Aug 14, 2025
Malicious code in webdrp (npm)
- Aug 14, 2025
Malicious code in webdriverio-perturbation-lint-primatology (npm)
- Aug 14, 2025
Malicious code in webdriverio-oortcloud-rigel-andromeda (npm)
- Aug 14, 2025
Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in webdriverio-babel-nova-procyon (npm)
- Aug 14, 2025
Malicious code in webdriverio-antimatter-pegasus-atlas (npm)
- Aug 14, 2025
Malicious code in webdriver-semantic-locators (npm)
- Aug 14, 2025
Malicious code in webdriver-mocha-paleoceanography-quito-cluster (npm)
- Aug 14, 2025
Malicious code in webdriver-mocha-eslint-library-version (npm)
- Aug 14, 2025
Malicious code in webdriver-manager-plutology-query-element-ui (npm)
- Aug 14, 2025
Malicious code in webdriver-manager-plutology-nextjs-dynamo (npm)
- Aug 14, 2025
Malicious code in webdriver-manager-meissa-xenos-augmentedreality (npm)
- Aug 14, 2025
Malicious code in webdriver-manager-janus-cosmos-redshift (npm)
- Aug 14, 2025
Malicious code in webdriver-manager-darkmatter-inflation-cosmicray (npm)
- Aug 14, 2025
Malicious code in webcolumn (npm)
- Aug 14, 2025
Malicious code in webchatcomponents (npm)
- Aug 14, 2025
Malicious code in webboggle (npm)
- Aug 14, 2025
Malicious code in webbeep (npm)
- Aug 14, 2025
Malicious code in webauthn-browser-signature (npm)
- Aug 14, 2025
Malicious code in webappweb (npm)
- Aug 14, 2025
Malicious code in webappsw (npm)
- Aug 14, 2025
Malicious code in web3-telegram-mini-app (npm)
- Aug 14, 2025
Malicious code in web-zero-export-sandbox-view (npm)
- Aug 14, 2025
Malicious code in web-worker-swc-plugin (npm)
- Aug 14, 2025
Malicious code in web-terminal-utils (npm)
- Aug 14, 2025
Malicious code in web-terminal-theme (npm)
- Aug 14, 2025
Malicious code in web-terminal-terminals-manager (npm)
- Aug 14, 2025
Malicious code in web-terminal-core-helper (npm)
- Aug 14, 2025
Malicious code in web-terminal-core (npm)
- Aug 14, 2025
Malicious code in web-supportal (npm)
- Aug 14, 2025
Malicious code in web-scripts-application (npm)
- Aug 14, 2025
Malicious code in web-pixels-extension (npm)
Page 5243 of 6,666