Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in membrane-commitlint-config-angular-async-octans (npm)
- Aug 14, 2025
Malicious code in membrane-astrophysics-fomalhaut-framework (npm)
- Aug 14, 2025
Malicious code in meltrams (npm)
- Aug 14, 2025
Malicious code in mellvin (npm)
- Aug 14, 2025
Malicious code in melkikh-verdaccio-dc (npm)
- Aug 14, 2025
Malicious code in melkikh-test-dc (npm)
- Aug 14, 2025
Malicious code in melkikh-dependency-confusion-test (npm)
- Aug 14, 2025
Malicious code in melhor (npm)
- Aug 14, 2025
Malicious code in melanesia (npm)
- Aug 14, 2025
Malicious code in meissa-nanotechnology-supervisor-geochemistry (npm)
- Aug 14, 2025
Malicious code in meissa-mysql-pipe-europa (npm)
- Aug 14, 2025
Malicious code in meissa-flare-farout-tethys (npm)
- Aug 14, 2025
Malicious code in meissa-firebase-equinox-docusaurus (npm)
- Aug 14, 2025
Malicious code in meissa-configstore-loopback-rehype (npm)
- Aug 14, 2025
Malicious code in meissa-baryon-parcel-wormhole (npm)
- Aug 14, 2025
Malicious code in meissa-astrometry-spectron-magellan (npm)
- Aug 14, 2025
Malicious code in meipintu (npm)
- Aug 14, 2025
Malicious code in meihan (npm)
- Aug 14, 2025
Malicious code in megatome (npm)
- Aug 14, 2025
Malicious code in megaplex (npm)
- Aug 14, 2025
Malicious code in megabrain (npm)
- Aug 14, 2025
Malicious code in meetalkjs (npm)
- Aug 14, 2025
Malicious code in meepmpb (npm)
- Aug 14, 2025
Malicious code in meeneeme (npm)
- Aug 14, 2025
Malicious code in mee6-api (npm)
- Aug 14, 2025
Malicious code in medium-post (npm)
- Aug 14, 2025
Malicious code in medium-author (npm)
- Aug 14, 2025
Malicious code in mediknit (npm)
- Aug 14, 2025
Malicious code in medicare-raml (npm)
- Aug 14, 2025
Malicious code in mediaspy (npm)
- Aug 14, 2025
Malicious code in medial (npm)
- Aug 14, 2025
Malicious code in mediaelch (npm)
- Aug 14, 2025
Malicious code in media-table (npm)
- Aug 14, 2025
Malicious code in media-service (npm)
- Aug 14, 2025
Malicious code in media-evip-cordova (npm)
- Aug 14, 2025
Malicious code in medeo-iris (npm)
- Aug 14, 2025
Malicious code in medcon (npm)
- Aug 14, 2025
Malicious code in medallia-hipchat-notifier (npm)
- Aug 14, 2025
Malicious code in medallia-commons-web-node (npm)
- Aug 14, 2025
Malicious code in mecurial (npm)
- Aug 14, 2025
Malicious code in mechzone (npm)
- Aug 14, 2025
Malicious code in mechatronics-vega-schema-castor (npm)
- Aug 14, 2025
Malicious code in mechatronics-ophiuchus-loopback-auth0 (npm)
- Aug 14, 2025
Malicious code in mechatronics-leda-indus-biotechnology (npm)
- Aug 14, 2025
Malicious code in mechatronics-graphql-lepton-cryptography (npm)
- Aug 14, 2025
Malicious code in mechatronics-figures-yildun-cosmicweb (npm)
- Aug 14, 2025
Malicious code in mecbwyzkatnlhoji (npm)
- Aug 14, 2025
Malicious code in mebuddie (npm)
- Aug 14, 2025
Malicious code in meaven (npm)
- Aug 14, 2025
Malicious code in measured-rails (npm)
Page 5468 of 6,634