Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,194 total in npm · sorted newest first- Aug 14, 2025
Malicious code in portsdemo (npm)
- Aug 14, 2025
Malicious code in portionfatty12 (npm)
- Aug 14, 2025
Malicious code in portflora (npm)
- Aug 14, 2025
Malicious code in portapoll (npm)
- Aug 14, 2025
Malicious code in portaless (npm)
- Aug 14, 2025
Malicious code in portalcgp (npm)
- Aug 14, 2025
Malicious code in portal-shared-library (npm)
- Aug 14, 2025
Malicious code in portableonboarding (npm)
- Aug 14, 2025
Malicious code in porp-types (npm)
- Aug 14, 2025
Malicious code in porifera (npm)
- Aug 14, 2025
Malicious code in popuptest (npm)
- Aug 14, 2025
Malicious code in popular (npm)
- Aug 14, 2025
Malicious code in popperscoolers.com (npm)
- Aug 14, 2025
Malicious code in popolni (npm)
- Aug 14, 2025
Malicious code in popguessr (npm)
- Aug 14, 2025
Malicious code in popayanjs (npm)
- Aug 14, 2025
Malicious code in popart (npm)
- Aug 14, 2025
Malicious code in pootis (npm)
- Aug 14, 2025
Malicious code in poolpartyjs (npm)
- Aug 14, 2025
Malicious code in pool-working2 (npm)
- Aug 14, 2025
Malicious code in pool-working (npm)
- Aug 14, 2025
Malicious code in pool-web4 (npm)
- Aug 14, 2025
Malicious code in pool-web2 (npm)
- Aug 14, 2025
Malicious code in pool-web (npm)
- Aug 14, 2025
Malicious code in pool-standard (npm)
- Aug 14, 2025
Malicious code in poodinis (npm)
- Aug 14, 2025
Malicious code in ponnuki (npm)
- Aug 14, 2025
Malicious code in ponete (npm)
- Aug 14, 2025
Malicious code in ponceur (npm)
- Aug 14, 2025
Malicious code in pommel (npm)
- Aug 14, 2025
Malicious code in pomidor (npm)
- Aug 14, 2025
Malicious code in pombawah (npm)
- Aug 14, 2025
Malicious code in polymer-redux-store (npm)
- Aug 14, 2025
Malicious code in polymarket-subgraph-common (npm)
- Aug 14, 2025
Malicious code in polyfill-browser (npm)
- Aug 14, 2025
Malicious code in polyclip (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-rgb-dmx (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-relay-pack (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-pc-power (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-hdmi-matrix (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-dimmer-dmx (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-artnet-node (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha (npm)
- Aug 14, 2025
Malicious code in polsimple (npm)
- Aug 14, 2025
Malicious code in pollapp (npm)
- Aug 14, 2025
Malicious code in polkaswap-exchange-web (npm)
- Aug 14, 2025
Malicious code in polisher (npm)
- Aug 14, 2025
Malicious code in polilogger (npm)
- Aug 14, 2025
Malicious code in policykit (npm)
- Aug 14, 2025
Malicious code in polaris_tokens_plus (npm)
Page 5431 of 6,664