Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in genomics-middleware-loglevel-iota (npm)
- Aug 14, 2025
Malicious code in genlog (npm)
- Aug 14, 2025
Malicious code in geniussports.sportstream.corxjs (npm)
- Aug 14, 2025
Malicious code in geniusbar (npm)
- Aug 14, 2025
Malicious code in genie-smoke (npm)
- Aug 14, 2025
Malicious code in genesis_collector (npm)
- Aug 14, 2025
Malicious code in genesis_client (npm)
- Aug 14, 2025
Malicious code in genesis-bugs-rc1 (npm)
- Aug 14, 2025
Malicious code in generic-rpc (npm)
- Aug 14, 2025
Malicious code in generator-watson-voice-of-the-customer (npm)
- Aug 14, 2025
Malicious code in generator-watson-text-bot (npm)
- Aug 14, 2025
Malicious code in generator-watson-social-customer-care (npm)
- Aug 14, 2025
Malicious code in generator-watson-news-intelligence (npm)
- Aug 14, 2025
Malicious code in generator-unicorn-cli (npm)
- Aug 14, 2025
Malicious code in generator-torbjorn (npm)
- Aug 14, 2025
Malicious code in generator-thescene-lib (npm)
- Aug 14, 2025
Malicious code in generator-test-bla (npm)
- Aug 14, 2025
Malicious code in generator-studio-api (npm)
- Aug 14, 2025
Malicious code in generator-speedseed-polymer-whitespace (npm)
- Aug 14, 2025
Malicious code in generator-speedseed-angular2-whitespace (npm)
- Aug 14, 2025
Malicious code in generator-sglk (npm)
- Aug 14, 2025
Malicious code in generator-sciencelogic (npm)
- Aug 14, 2025
Malicious code in generator-rollup (npm)
- Aug 14, 2025
Malicious code in generator-react-ui-component (npm)
- Aug 14, 2025
Malicious code in generator-plyo (npm)
- Aug 14, 2025
Malicious code in generator-plato (npm)
- Aug 14, 2025
Malicious code in generator-modeus-app (npm)
- Aug 14, 2025
Malicious code in generator-mendixreact (npm)
- Aug 14, 2025
Malicious code in generator-mean-coffee (npm)
- Aug 14, 2025
Malicious code in generator-ls-template (npm)
- Aug 14, 2025
Malicious code in generator-longtailbanners (npm)
- Aug 14, 2025
Malicious code in generator-longtail-banners (npm)
- Aug 14, 2025
Malicious code in generator-longtail (npm)
- Aug 14, 2025
Malicious code in generator-kraken-react (npm)
- Aug 14, 2025
Malicious code in generator-just (npm)
- Aug 14, 2025
Malicious code in generator-ionicmod (npm)
- Aug 14, 2025
Malicious code in generator-ikom-microservice (npm)
- Aug 14, 2025
Malicious code in generator-iea (npm)
- Aug 14, 2025
Malicious code in generator-httpeace-react (npm)
- Aug 14, 2025
Malicious code in generator-httpeace-node (npm)
- Aug 14, 2025
Malicious code in generator-gobsmack (npm)
- Aug 14, 2025
Malicious code in generator-flynt (npm)
- Aug 14, 2025
Malicious code in generator-dr-service-template (npm)
- Aug 14, 2025
Malicious code in generator-dmh (npm)
- Aug 14, 2025
Malicious code in generator-django-kickstart (npm)
- Aug 14, 2025
Malicious code in generator-ctech-component-generator (npm)
- Aug 14, 2025
Malicious code in generator-chainy-plugin (npm)
- Aug 14, 2025
Malicious code in generator-chainy-bundle (npm)
- Aug 14, 2025
Malicious code in generator-chainy (npm)
- Aug 14, 2025
Malicious code in generator-bot-template-generator (npm)
Page 5565 of 6,634