Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in mocha-filament-child-process-janus (npm)
- Aug 14, 2025
Malicious code in mocha-dorado-meteor-iota (npm)
- Aug 14, 2025
Malicious code in mocha-cache-cz-conventional-changelog-cosmicweb (npm)
- Aug 14, 2025
Malicious code in mobtest (npm)
- Aug 14, 2025
Malicious code in mobmonkey (npm)
- Aug 14, 2025
Malicious code in mobmap (npm)
- Aug 14, 2025
Malicious code in mobiuscore (npm)
- Aug 14, 2025
Malicious code in mobipluto (npm)
- Aug 14, 2025
Malicious code in mobiplas (npm)
- Aug 14, 2025
Malicious code in mobilyser (npm)
- Aug 14, 2025
Malicious code in mobilya (npm)
- Aug 14, 2025
Malicious code in mobilne (npm)
- Aug 14, 2025
Malicious code in mobilestewardship (npm)
- Aug 14, 2025
Malicious code in mobilephr (npm)
- Aug 14, 2025
Malicious code in mobilehubcore (npm)
- Aug 14, 2025
Malicious code in mobilehub-core (npm)
- Aug 14, 2025
Malicious code in mobilefirst (npm)
- Aug 14, 2025
Malicious code in mobileapo (npm)
- Aug 14, 2025
Malicious code in mobile-user-info (npm)
- Aug 14, 2025
Malicious code in mobile-share (npm)
- Aug 14, 2025
Malicious code in mobikhoj (npm)
- Aug 14, 2025
Malicious code in mobdevcon (npm)
- Aug 14, 2025
Malicious code in mobact (npm)
- Aug 14, 2025
Malicious code in moat-zenith-3ssn (npm)
- Aug 14, 2025
Malicious code in moat-yankee-995w (npm)
- Aug 14, 2025
Malicious code in moat-raspberry-lefw (npm)
- Aug 14, 2025
Malicious code in moat-pulsar-teeg (npm)
- Aug 14, 2025
Malicious code in moat-meteor-lhkc (npm)
- Aug 14, 2025
Malicious code in moat-kuiper-6kbq (npm)
- Aug 14, 2025
Malicious code in moat-jetty-611n (npm)
- Aug 14, 2025
Malicious code in moat-heliosphere-lgtl (npm)
- Aug 14, 2025
Malicious code in moat-date-jixd (npm)
- Aug 14, 2025
Malicious code in mnumerics (npm)
- Aug 14, 2025
Malicious code in mnt-ima-html5 (npm)
- Aug 14, 2025
Malicious code in mns-fe-starter-kit (npm)
- Aug 14, 2025
Malicious code in mnp-components (npm)
- Aug 14, 2025
Malicious code in mngvuctixkzsfhka (npm)
- Aug 14, 2025
Malicious code in mmurtl (npm)
- Aug 14, 2025
Malicious code in mmol (npm)
- Aug 14, 2025
Malicious code in mmoent (npm)
- Aug 14, 2025
Malicious code in mmjstool (npm)
- Aug 14, 2025
Malicious code in mmicoe (npm)
- Aug 14, 2025
Malicious code in mmfrr43 (npm)
- Aug 14, 2025
Malicious code in mmapdb (npm)
- Aug 14, 2025
Malicious code in mlzngrjwackvpxdk (npm)
- Aug 14, 2025
Malicious code in mlxb7x (npm)
- Aug 14, 2025
Malicious code in mlwkjedbnqoizkpx (npm)
- Aug 14, 2025
Malicious code in mlibre (npm)
- Aug 14, 2025
Malicious code in mleb-ng2 (npm)
- Aug 14, 2025
Malicious code in mle (npm)
Page 5460 of 6,634