Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in magnetar-nightwatch-loop-higgs (npm)
- Aug 14, 2025
Malicious code in magic-script (npm)
- Aug 14, 2025
Malicious code in magform (npm)
- Aug 14, 2025
Malicious code in mageray (npm)
- Aug 14, 2025
Malicious code in mageplus (npm)
- Aug 14, 2025
Malicious code in magelog (npm)
- Aug 14, 2025
Malicious code in magellan-xo-dotenv-safe-typeorm (npm)
- Aug 14, 2025
Malicious code in magellan-test-uninstall-sociobiology (npm)
- Aug 14, 2025
Malicious code in magellan-pyxis-paleoanthropology-archaeogenetics (npm)
- Aug 14, 2025
Malicious code in magellan-prompts-wormhole-apollo (npm)
- Aug 14, 2025
Malicious code in magellan-postcss-apex-sails (npm)
- Aug 14, 2025
Malicious code in magellan-petrology-spectron-webdriver-technocracy (npm)
- Aug 14, 2025
Malicious code in magellan-non-blocking-run-script-bioinformatics (npm)
- Aug 14, 2025
Malicious code in magellan-halley-socketio-uninstall (npm)
- Aug 14, 2025
Malicious code in magellan-dysonswarm-pm2-saturnology (npm)
- Aug 14, 2025
Malicious code in magellan-dorado-quito-hercules (npm)
- Aug 14, 2025
Malicious code in magellan-charon-vulcan-dependencies (npm)
- Aug 14, 2025
Malicious code in mageduel (npm)
- Aug 14, 2025
Malicious code in mage-wallet-js (npm)
- Aug 14, 2025
Malicious code in mag-sdk-core (npm)
- Aug 14, 2025
Malicious code in mag-app-youtubetesting (npm)
- Aug 14, 2025
Malicious code in mag-app-youtubetest (npm)
- Aug 14, 2025
Malicious code in madian (npm)
- Aug 14, 2025
Malicious code in madcap (npm)
- Aug 14, 2025
Malicious code in mactips (npm)
- Aug 14, 2025
Malicious code in mackip (npm)
- Aug 14, 2025
Malicious code in machinery-typescript (npm)
- Aug 14, 2025
Malicious code in machida (npm)
- Aug 14, 2025
Malicious code in machette (npm)
- Aug 14, 2025
Malicious code in maches (npm)
- Aug 14, 2025
Malicious code in MacGyver (npm)
- Aug 14, 2025
Malicious code in macdroid (npm)
- Aug 14, 2025
Malicious code in macdonalds (npm)
- Aug 14, 2025
Malicious code in macbill (npm)
- Aug 14, 2025
Malicious code in macareux (npm)
- Aug 14, 2025
Malicious code in macaddy (npm)
- Aug 14, 2025
Malicious code in maajaidum (npm)
- Aug 14, 2025
Malicious code in maacro (npm)
- Aug 14, 2025
Malicious code in m9tubq (npm)
- Aug 14, 2025
Malicious code in m3sp (npm)
- Aug 14, 2025
Malicious code in m-backdoor (npm)
- Aug 14, 2025
Malicious code in lzvrap (npm)
- Aug 14, 2025
Malicious code in lznqiteufdywgkrv (npm)
- Aug 14, 2025
Malicious code in lzcfdrkwkxhsjegu (npm)
- Aug 14, 2025
Malicious code in lyuyt5 (npm)
- Aug 14, 2025
Malicious code in lyu_test_test_test (npm)
- Aug 14, 2025
Malicious code in lyu_pkg (npm)
- Aug 14, 2025
Malicious code in lyte-compile-fast (npm)
1 compromised version
- Aug 14, 2025
Malicious code in lystgram (npm)
- Aug 14, 2025
Malicious code in lyst-product-card-generator (npm)
Page 5476 of 6,634