Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,247 total in npm · sorted newest first- Aug 14, 2025
Malicious code in test-mlw1-equip-wreak (npm)
- Aug 14, 2025
Malicious code in test-mlw1-epoch-nines (npm)
- Aug 14, 2025
Malicious code in test-mlw1-emote-debit-loner-teary (npm)
- Aug 14, 2025
Malicious code in test-mlw1-dwalm-gulls (npm)
- Aug 14, 2025
Malicious code in test-mlw1-could-latex-solen-teddy (npm)
- Aug 14, 2025
Malicious code in test-mlw1-cotts-pyres-sigma-quids (npm)
- Aug 14, 2025
Malicious code in test-mlw1-cocco-garda-rakes-qadis (npm)
- Aug 14, 2025
Malicious code in test-mlw1-cadre-dense-dauts-belts (npm)
- Aug 14, 2025
Malicious code in test-mlw1-cadis-idant (npm)
- Aug 14, 2025
Malicious code in test-mlw1-beths-whoso-wulls-noted (npm)
- Aug 14, 2025
Malicious code in test-mlw1-azyme-woody-infra-baulk (npm)
- Aug 14, 2025
Malicious code in test-hello-module (npm)
- Aug 14, 2025
Malicious code in test-greatfilter-meteor-pulsar (npm)
- Aug 14, 2025
Malicious code in test-deprecate-1 (npm)
- Aug 14, 2025
Malicious code in test-crust-kardashevscale-panspermia (npm)
- Aug 14, 2025
Malicious code in test-ccsv (npm)
- Aug 14, 2025
Malicious code in test-aws-xray-sdk-express (npm)
- Aug 14, 2025
Malicious code in test-auth-tr (npm)
- Aug 14, 2025
Malicious code in test-attr (npm)
- Aug 14, 2025
Malicious code in test-10 (npm)
- Aug 14, 2025
Malicious code in teslaos (npm)
- Aug 14, 2025
Malicious code in terser-webpack-plugin-rollup-npm-yildun (npm)
- Aug 14, 2025
Malicious code in terser-webpack-plugin-nebula-fetch-umbriel (npm)
- Aug 14, 2025
Malicious code in terser-webpack-plugin-mutation-markdownlint-inflation (npm)
- Aug 14, 2025
Malicious code in terser-webpack-plugin-elara-framework-seismology (npm)
- Aug 14, 2025
Malicious code in terser-webpack-plugin-brane-prettier-style-loader (npm)
- Aug 14, 2025
Malicious code in terser-terraforming-cryonics-radiometric (npm)
- Aug 14, 2025
Malicious code in terser-publish-quasar-hydra (npm)
- Aug 14, 2025
Malicious code in terser-module-csv-promise (npm)
- Aug 14, 2025
Malicious code in terser-hugo-cordelia-mechatronics (npm)
- Aug 14, 2025
Malicious code in terser-fork-cors-eridanus (npm)
- Aug 14, 2025
Malicious code in terser-envconfig-saturnology-algol (npm)
- Aug 14, 2025
Malicious code in terser-aldebaran-run-script-websockets (npm)
- Aug 14, 2025
Malicious code in terrewubna (npm)
- Aug 14, 2025
Malicious code in terraview (npm)
- Aug 14, 2025
Malicious code in terralink (npm)
- Aug 14, 2025
Malicious code in terraforming-winston-meteor-augmentedreality (npm)
- Aug 14, 2025
Malicious code in terraforming-install-proxima-meteor (npm)
- Aug 14, 2025
Malicious code in terraforming-epimetheus-loopback-uninstall (npm)
- Aug 14, 2025
Malicious code in terra_yekb0_17brh_equinox (npm)
- Aug 14, 2025
Malicious code in terra_iy51k_4mwgk_universe (npm)
- Aug 14, 2025
Malicious code in terra_g8xdb_95knj_crystal (npm)
- Aug 14, 2025
Malicious code in terra_eqdr9_ncn56_valley (npm)
- Aug 14, 2025
Malicious code in terra_ctepi_h6f9d_cascade (npm)
- Aug 14, 2025
Malicious code in terra_7clx0_s0c6y_serenade (npm)
- Aug 14, 2025
Malicious code in terra_48civ_oddf5_glacier (npm)
- Aug 14, 2025
Malicious code in terra-qlbws-qy148-zenith-project (npm)
- Aug 14, 2025
Malicious code in terra-okrf9-w4rcf-quiver-project (npm)
- Aug 14, 2025
Malicious code in terra-mcc2c-epcvi-raven-project (npm)
- Aug 14, 2025
Malicious code in terra-deu5m-kkc89-solace-project (npm)
Page 5327 of 6,665