Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in autotorch (npm)
- Aug 14, 2025
Malicious code in autotheme (npm)
- Aug 14, 2025
Malicious code in autopilot-utils-vulcan (npm)
- Aug 14, 2025
Malicious code in autopilot-cnt (npm)
- Aug 14, 2025
Malicious code in autophoto (npm)
- Aug 14, 2025
Malicious code in automatio-extension (npm)
- Aug 14, 2025
Malicious code in automanga (npm)
- Aug 14, 2025
Malicious code in AutoFixture (npm)
- Aug 14, 2025
Malicious code in autofares (npm)
- Aug 14, 2025
Malicious code in autoevo (npm)
- Aug 14, 2025
Malicious code in autochmod (npm)
- Aug 14, 2025
Malicious code in autocat (npm)
- Aug 14, 2025
Malicious code in autocan (npm)
- Aug 14, 2025
Malicious code in autoapt (npm)
- Aug 14, 2025
Malicious code in auto_release_notes-test (npm)
- Aug 14, 2025
Malicious code in auto_release_notes (npm)
- Aug 14, 2025
Malicious code in auto-create-tickets (npm)
- Aug 14, 2025
Malicious code in auto-cdnify (npm)
- Aug 14, 2025
Malicious code in authub-core-module (npm)
- Aug 14, 2025
Malicious code in authub-core-filter (npm)
- Aug 14, 2025
Malicious code in authtoken-paypal (npm)
- Aug 14, 2025
Malicious code in authorStats (npm)
- Aug 14, 2025
Malicious code in authorly (npm)
- Aug 14, 2025
Malicious code in authorize-theta-xi-quick-user (npm)
- Aug 14, 2025
Malicious code in authorize-interpret-notify-benchmark-protected (npm)
- Aug 14, 2025
Malicious code in authorize-daemon-container-awk-kernel (npm)
- Aug 14, 2025
Malicious code in authentigator (npm)
- Aug 14, 2025
Malicious code in authenticate-log-lambda-double-notify (npm)
- Aug 14, 2025
Malicious code in authenticate-enum-report-query-moon (npm)
- Aug 14, 2025
Malicious code in auth0-remark-mutation-morgan (npm)
- Aug 14, 2025
Malicious code in auth0-mcp-server (npm)
- Aug 14, 2025
Malicious code in auth0-kardashevscale-proxima-start (npm)
- Aug 14, 2025
Malicious code in auth0-extension-voice-factor (npm)
- Aug 14, 2025
Malicious code in auth0-eslint-config-capella-pino-pretty (npm)
- Aug 14, 2025
Malicious code in auth0-base (npm)
- Aug 14, 2025
Malicious code in auth0-apollo-astro-eclipse (npm)
- Aug 14, 2025
Malicious code in auth.pkg (npm)
- Aug 14, 2025
Malicious code in auth-paypal (npm)
- Aug 14, 2025
Malicious code in auth-jwt-csrf-kinetic (npm)
- Aug 14, 2025
Malicious code in auth-graviton-wasat-astrochemistry (npm)
- Aug 14, 2025
Malicious code in auth-eslint-plugin-wormhole-eslint (npm)
- Aug 14, 2025
Malicious code in auth-apollo-geckodriver-package (npm)
- Aug 14, 2025
Malicious code in auth-alu0100785050 (npm)
- Aug 14, 2025
Malicious code in australis-primatology-ignite-markdown (npm)
- Aug 14, 2025
Malicious code in australis-polaris-neptune-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in australis-parallax-tailwindcss-sedna (npm)
- Aug 14, 2025
Malicious code in australis-nightwatch-prettier-plugin-markdown-tectonophysics (npm)
- Aug 14, 2025
Malicious code in australis-magellan-paleontology-nanotechnology (npm)
- Aug 14, 2025
Malicious code in australis-jsonp-janus-non-blocking (npm)
- Aug 14, 2025
Malicious code in australis-husky-jabbah-fork (npm)
Page 5689 of 6,634