Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in marudor-hazelcast-client (npm)
- Aug 14, 2025
Malicious code in martillo (npm)
- Aug 14, 2025
Malicious code in martaio (npm)
- Aug 14, 2025
Malicious code in marstons (npm)
- Aug 14, 2025
Malicious code in marquez (npm)
- Aug 14, 2025
Malicious code in marooon (npm)
- Aug 14, 2025
Malicious code in marmik1a (npm)
- Aug 14, 2025
Malicious code in marmik (npm)
- Aug 14, 2025
Malicious code in marley-plugin-router (npm)
- Aug 14, 2025
Malicious code in marley-plugin-express (npm)
- Aug 14, 2025
Malicious code in marley-plugin-core (npm)
- Aug 14, 2025
Malicious code in marley-plugin (npm)
- Aug 14, 2025
Malicious code in marley-logger (npm)
- Aug 14, 2025
Malicious code in marley-cli (npm)
- Aug 14, 2025
Malicious code in marley (npm)
- Aug 14, 2025
Malicious code in markus-oberlehner-net (npm)
- Aug 14, 2025
Malicious code in markup-web-editor (npm)
- Aug 14, 2025
Malicious code in markpond (npm)
- Aug 14, 2025
Malicious code in markplewis-eyeglass-module (npm)
- Aug 14, 2025
Malicious code in marklogic-af-test-20220718 (npm)
- Aug 14, 2025
Malicious code in markjosh (npm)
- Aug 14, 2025
Malicious code in marketing_extension_schemas (npm)
- Aug 14, 2025
Malicious code in marketing_assets_theme (npm)
- Aug 14, 2025
Malicious code in marketing_assets_essentials (npm)
- Aug 14, 2025
Malicious code in marketing_assets (npm)
- Aug 14, 2025
Malicious code in markdownlint-spectroscopy-wasat-start (npm)
- Aug 14, 2025
Malicious code in markdownlint-castor-betelgeuse-miranda (npm)
- Aug 14, 2025
Malicious code in markdown-subscription-achernar-glaciology (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-sedna-markdown-pdf-module (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-package-seismology-prettier (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-ganymede-archaeometry-warp (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-fermiparadox-eigenstate-quark (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-enceladus-registry-orbit (npm)
- Aug 14, 2025
Malicious code in markdown-meissa-optimize-css-assets-webpack-plugin-odin (npm)
- Aug 14, 2025
Malicious code in markdown-magnetar-neptune-ichnology (npm)
- Aug 14, 2025
Malicious code in markdown-izar-blazar-halley (npm)
- Aug 14, 2025
Malicious code in markdown-it-embed (npm)
- Aug 14, 2025
Malicious code in markdown-ethology-javascript-despina (npm)
- Aug 14, 2025
Malicious code in mariya (npm)
- Aug 14, 2025
Malicious code in marin.petrov1988-frame-print (npm)
- Aug 14, 2025
Malicious code in maribor (npm)
- Aug 14, 2025
Malicious code in margele (npm)
- Aug 14, 2025
Malicious code in maranate (npm)
- Aug 14, 2025
Malicious code in maquinita (npm)
- Aug 14, 2025
Malicious code in maptry (npm)
- Aug 14, 2025
Malicious code in mapsnap (npm)
- Aug 14, 2025
Malicious code in mapptus (npm)
- Aug 14, 2025
Malicious code in maplink-geocoder (npm)
- Aug 14, 2025
Malicious code in maple_zf3vh_qhayi_ivy (npm)
- Aug 14, 2025
Malicious code in maple_tj2ef_oh6ln_illusion (npm)
Page 5472 of 6,634