Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in putri-lengko97-breki (npm)
- Aug 14, 2025
Malicious code in putri-enting96-breki (npm)
- Aug 14, 2025
Malicious code in putri-empal25-breki (npm)
- Aug 14, 2025
Malicious code in putri-bakso28-breki (npm)
- Aug 14, 2025
Malicious code in putra-tomat25-breki (npm)
- Aug 14, 2025
Malicious code in putra-tapai28-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-sate8-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-ruwet45-breki (npm)
- Aug 14, 2025
Malicious code in putra-miemee86-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-miebogor100-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-kemplang69-breki (npm)
- Aug 14, 2025
Malicious code in putra-gepuk16-breki (npm)
- Aug 14, 2025
Malicious code in pustache (npm)
- Aug 14, 2025
Malicious code in pusqna (npm)
- Aug 14, 2025
Malicious code in pushko (npm)
- Aug 14, 2025
Malicious code in pushkey (npm)
- Aug 14, 2025
Malicious code in pushek-frontend (npm)
- Aug 14, 2025
Malicious code in pushapage (npm)
- Aug 14, 2025
Malicious code in pushadmin (npm)
- Aug 14, 2025
Malicious code in puresugar (npm)
- Aug 14, 2025
Malicious code in purejs-onepage-scroll (npm)
- Aug 14, 2025
Malicious code in purebmi (npm)
- Aug 14, 2025
Malicious code in puppeteer-superflare-eridanus-sagitta (npm)
- Aug 14, 2025
Malicious code in puppeteer-quantumfoam-fork-figures (npm)
- Aug 14, 2025
Malicious code in puppeteer-prettier-writable-tethys (npm)
- Aug 14, 2025
Malicious code in puppeteer-hyperion-jabbah-kastra (npm)
- Aug 14, 2025
Malicious code in puppeteer-exobiology-mira-higgs (npm)
- Aug 14, 2025
Malicious code in puppeteer-entanglement-geochronology-ursa (npm)
- Aug 14, 2025
Malicious code in puppeteer-dactyl-backend-zenith (npm)
- Aug 14, 2025
Malicious code in puppeteer-cluster-axios-standard (npm)
- Aug 14, 2025
Malicious code in puncuation (npm)
- Aug 14, 2025
Malicious code in pulse_wztzk_z9ypy_twilight (npm)
- Aug 14, 2025
Malicious code in pulse_v4geh_z4wnk_whirlwind (npm)
- Aug 14, 2025
Malicious code in pulse_qmwv4_3fhj4_banyan (npm)
- Aug 14, 2025
Malicious code in pulse_otsds_slv9v_vantage (npm)
- Aug 14, 2025
Malicious code in pulse_nrf9n_dez8s_maple (npm)
- Aug 14, 2025
Malicious code in pulse-aura-zqg679-project (npm)
- Aug 14, 2025
Malicious code in pulsar-zamia-0ql5 (npm)
- Aug 14, 2025
Malicious code in pulsar-wezen-nightwatch-jabbah (npm)
- Aug 14, 2025
Malicious code in pulsar-webdriverio-express-atlas (npm)
- Aug 14, 2025
Malicious code in pulsar-superposition-fomalhaut-on (npm)
- Aug 14, 2025
Malicious code in pulsar-spectron-mantle-webdriverio (npm)
- Aug 14, 2025
Malicious code in pulsar-solis-pino-pretty-dysonswarm (npm)
- Aug 14, 2025
Malicious code in pulsar-oscar-uv8l (npm)
- Aug 14, 2025
Malicious code in pulsar-november-00rh (npm)
- Aug 14, 2025
Malicious code in pulsar-mushroom-4e6b (npm)
- Aug 14, 2025
Malicious code in pulsar-kapok-nzom (npm)
- Aug 14, 2025
Malicious code in pulsar-foxtrot-0jay (npm)
- Aug 14, 2025
Malicious code in pulsar-elderberry-inbe (npm)
- Aug 14, 2025
Malicious code in pulsar-beetroot-jpe2 (npm)
Page 5404 of 6,664