Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in mirrorman (npm)
- Aug 14, 2025
Malicious code in mirkwood-rx (npm)
- Aug 14, 2025
Malicious code in mirkwood (npm)
- Aug 14, 2025
Malicious code in miraphi (npm)
- Aug 14, 2025
Malicious code in miranda-webdriver-manager-semantic-ui-kastra (npm)
- Aug 14, 2025
Malicious code in miranda-regulus-webdriverio-ophiuchus (npm)
- Aug 14, 2025
Malicious code in miranda-quark-chromedriver-taurus (npm)
- Aug 14, 2025
Malicious code in miranda-nebula-toml-borealis (npm)
- Aug 14, 2025
Malicious code in miranda-less-chai-babel (npm)
- Aug 14, 2025
Malicious code in miranda-iota-selenium-update (npm)
- Aug 14, 2025
Malicious code in miranda-indus-geoarchaeology-norma (npm)
- Aug 14, 2025
Malicious code in miranda-despina-got-parcel (npm)
- Aug 14, 2025
Malicious code in miranda-crust-markdown-pdf-chromedriver (npm)
- Aug 14, 2025
Malicious code in miranda-coronalmassejection-nodemon-wormhole (npm)
- Aug 14, 2025
Malicious code in miranda-bunyan-testcafe-chakra-ui (npm)
- Aug 14, 2025
Malicious code in miranda-adonis-asthenosphere-astrochemistry (npm)
- Aug 14, 2025
Malicious code in miraikan (npm)
- Aug 14, 2025
Malicious code in mirage_ygbtj_w0tjd_ocean (npm)
- Aug 14, 2025
Malicious code in mirage_hle1v_stxss_raven (npm)
- Aug 14, 2025
Malicious code in mirage_82zrw_qz9fl_lunar (npm)
- Aug 14, 2025
Malicious code in mirage-rqnxv-jfcva-boulder-project (npm)
- Aug 14, 2025
Malicious code in mirage-k7ts4-vhu0u-xylophone-project (npm)
- Aug 14, 2025
Malicious code in mirage-jn598-ffwsq-zephyr-project (npm)
- Aug 14, 2025
Malicious code in mirage-ctuaz-u2y7d-zen-project (npm)
- Aug 14, 2025
Malicious code in mirage-3322x-mfx8v-xenon-project (npm)
- Aug 14, 2025
Malicious code in mirage-1xmd0-phn4h-vista-project (npm)
- Aug 14, 2025
Malicious code in mira-neptune-apollo-orbit (npm)
- Aug 14, 2025
Malicious code in mira-bioinformatics-toml-izar (npm)
- Aug 14, 2025
Malicious code in mintranet (npm)
- Aug 14, 2025
Malicious code in mintomic (npm)
- Aug 14, 2025
Malicious code in minnesota-timberwolves---nba-jersey (npm)
- Aug 14, 2025
Malicious code in minnchart (npm)
- Aug 14, 2025
Malicious code in minitodo (npm)
- Aug 14, 2025
Malicious code in minitest-silence (npm)
- Aug 14, 2025
Malicious code in minitest-distributed (npm)
- Aug 14, 2025
Malicious code in minisoft (npm)
- Aug 14, 2025
Malicious code in minimst (npm)
- Aug 14, 2025
Malicious code in minima.js (npm)
- Aug 14, 2025
Malicious code in minify-monitor-small-phi-nu (npm)
- Aug 14, 2025
Malicious code in minify-catch-function-object-epsilon (npm)
- Aug 14, 2025
Malicious code in minifbi (npm)
- Aug 14, 2025
Malicious code in minicljx (npm)
- Aug 14, 2025
Malicious code in minicalc (npm)
- Aug 14, 2025
Malicious code in miniby (npm)
- Aug 14, 2025
Malicious code in minibee (npm)
- Aug 14, 2025
Malicious code in miniatur (npm)
- Aug 14, 2025
Malicious code in mini-redux-form (npm)
- Aug 14, 2025
Malicious code in mini-oxygen (npm)
- Aug 14, 2025
Malicious code in mini-keyboard-release (npm)
- Aug 14, 2025
Malicious code in mini-css-extract-plugin-materialize-technocracy-venus (npm)
Page 5462 of 6,634