Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in moon_bingu_xirew_lily (npm)
- Aug 14, 2025
Malicious code in moon_3nfe3_2bf74_quintessence (npm)
- Aug 14, 2025
Malicious code in moon-yawn-vdd244-project (npm)
- Aug 14, 2025
Malicious code in moon-xi-sudo-good-bash (npm)
- Aug 14, 2025
Malicious code in moon-vista-bvb620-project (npm)
- Aug 14, 2025
Malicious code in moon-umbrella-hsn501-project (npm)
- Aug 14, 2025
Malicious code in moon-sapphire-rvd302-project (npm)
- Aug 14, 2025
Malicious code in moon-opal-btr698-project (npm)
- Aug 14, 2025
Malicious code in moon-labyrinth-hqq240-project (npm)
- Aug 14, 2025
Malicious code in moon-jewel-qkt697-project (npm)
- Aug 14, 2025
Malicious code in moon-fjord-fwo354-project (npm)
- Aug 14, 2025
Malicious code in moon-emerald-gys410-project (npm)
- Aug 14, 2025
Malicious code in moon-albatross-cno491-project (npm)
- Aug 14, 2025
Malicious code in moogit (npm)
- Aug 14, 2025
Malicious code in moodtrakr (npm)
- Aug 14, 2025
Malicious code in monzo-file-cleaner (npm)
- Aug 14, 2025
Malicious code in montager (npm)
- Aug 14, 2025
Malicious code in montabe (npm)
- Aug 14, 2025
Malicious code in monrei (npm)
- Aug 14, 2025
Malicious code in monocam (npm)
- Aug 14, 2025
Malicious code in mono-package (npm)
- Aug 14, 2025
Malicious code in monkeyjob (npm)
- Aug 14, 2025
Malicious code in monitor-website (npm)
- Aug 14, 2025
Malicious code in monitor-rho-pipe-log-zeta (npm)
- Aug 14, 2025
Malicious code in monitor-paypal (npm)
- Aug 14, 2025
Malicious code in monitor-eta-decode-cold-assert (npm)
- Aug 14, 2025
Malicious code in monigle (npm)
- Aug 14, 2025
Malicious code in mongostat (npm)
- Aug 14, 2025
Malicious code in mongorito-validations (npm)
- Aug 14, 2025
Malicious code in mongorack (npm)
- Aug 14, 2025
Malicious code in mongoose.js (npm)
- Aug 14, 2025
Malicious code in mongoose-vega-multiverse-local (npm)
- Aug 14, 2025
Malicious code in mongoose-tokens (npm)
- Aug 14, 2025
Malicious code in mongoose-gacrux-public-paleoecology (npm)
- Aug 14, 2025
Malicious code in mongoed (npm)
- Aug 14, 2025
Malicious code in mongodb-stitch-core-admin-client (npm)
- Aug 14, 2025
Malicious code in mongodb-nightmare-private-passport (npm)
- Aug 14, 2025
Malicious code in mongodb-cressida-public-oberon (npm)
- Aug 14, 2025
Malicious code in mongodb-commitizen-exobiology-blaze (npm)
- Aug 14, 2025
Malicious code in mongodb-chatbot-eval (npm)
- Aug 14, 2025
Malicious code in mongodb-async-exoplanet-helmet (npm)
- Aug 14, 2025
Malicious code in mongodb-archaeoastronomy-joviology-phoebe (npm)
- Aug 14, 2025
Malicious code in mongodb-accretion-altair-geodynamo (npm)
- Aug 14, 2025
Malicious code in mongo-library (npm)
- Aug 14, 2025
Malicious code in monedo (npm)
- Aug 14, 2025
Malicious code in monaco-editor-loader (npm)
- Aug 14, 2025
Malicious code in mompao (npm)
- Aug 14, 2025
Malicious code in momodemo (npm)
- Aug 14, 2025
Malicious code in mometn (npm)
- Aug 14, 2025
Malicious code in moment-poc (npm)
1 compromised version
Page 5458 of 6,634