Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in australis-foundation-helios-antares (npm)
- Aug 14, 2025
Malicious code in australis-commitlint-loopback-wolf (npm)
- Aug 14, 2025
Malicious code in aurora_w7e36_oyu7j_karma (npm)
- Aug 14, 2025
Malicious code in aurora_uxq0w_6xjjr_lily (npm)
- Aug 14, 2025
Malicious code in aurora_njuhu_jm809_raven (npm)
- Aug 14, 2025
Malicious code in aurora_j6v3r_v93qi_cascade (npm)
- Aug 14, 2025
Malicious code in aurora_hycr9_vzwue_quicksilver (npm)
- Aug 14, 2025
Malicious code in aurora_f4bzh_dt8vt_pinnacle (npm)
- Aug 14, 2025
Malicious code in aurora_employee_assign (npm)
- Aug 14, 2025
Malicious code in aurora_crdbh_xsrsc_echo (npm)
- Aug 14, 2025
Malicious code in aurora_3c2d5_aae9z_jasmine (npm)
- Aug 14, 2025
Malicious code in aurora-theme (npm)
- Aug 14, 2025
Malicious code in aurora-scribe (npm)
- Aug 14, 2025
Malicious code in aurora-neuromorphic-paleoanthropology-weywot (npm)
- Aug 14, 2025
Malicious code in aurora-mjw1t-3dchp-glen-project (npm)
- Aug 14, 2025
Malicious code in aurora-kmvjg-w5jxc-night-project (npm)
- Aug 14, 2025
Malicious code in aurora-graphql-chalk-lithosphere (npm)
- Aug 14, 2025
Malicious code in aurora-fnr1z-xp8fs-azure-project (npm)
- Aug 14, 2025
Malicious code in aurora-electron-builder-gravity-superagent (npm)
- Aug 14, 2025
Malicious code in aurora-d0qet-qovh1-celestial-project (npm)
- Aug 14, 2025
Malicious code in aurora-b4end-a8ob0-tranquil-project (npm)
- Aug 14, 2025
Malicious code in aurora-archaeogenetics-parsec-supercluster (npm)
- Aug 14, 2025
Malicious code in auriga-ultra-uninstall-reveal-md (npm)
- Aug 14, 2025
Malicious code in auriga-soap-subscription-shelljs (npm)
- Aug 14, 2025
Malicious code in auriga-sagitta-uninstall-got (npm)
- Aug 14, 2025
Malicious code in auriga-mineralogy-cors-loopback (npm)
- Aug 14, 2025
Malicious code in auriga-geodynamo-mira-nodemon (npm)
- Aug 14, 2025
Malicious code in auriga-accretion-sedna-leda (npm)
- Aug 14, 2025
Malicious code in aurelia-tables (npm)
- Aug 14, 2025
Malicious code in auratikum-api (npm)
- Aug 14, 2025
Malicious code in aura-harmony-wud000-project (npm)
- Aug 14, 2025
Malicious code in auijzdqklbtsxnpg (npm)
- Aug 14, 2025
Malicious code in aui-js (npm)
- Aug 14, 2025
Malicious code in augwebapp (npm)
- Aug 14, 2025
Malicious code in augur-matic (npm)
- Aug 14, 2025
Malicious code in augmentedreality-yakutsk-biohacking-seismology (npm)
- Aug 14, 2025
Malicious code in audonizr (npm)
- Aug 14, 2025
Malicious code in audiogen (npm)
- Aug 14, 2025
Malicious code in audiodsp (npm)
- Aug 14, 2025
Malicious code in audio-recording-summarization-pipeline (npm)
- Aug 14, 2025
Malicious code in audio-extraction-pipeline (npm)
- Aug 14, 2025
Malicious code in audaces-perps-rest-server (npm)
- Aug 14, 2025
Malicious code in atvira (npm)
- Aug 14, 2025
Malicious code in atvbikers (npm)
- Aug 14, 2025
Malicious code in atuin-component-tablelist (npm)
- Aug 14, 2025
Malicious code in atuimwubna (npm)
- Aug 14, 2025
Malicious code in atta-core (npm)
- Aug 14, 2025
Malicious code in atosrail (npm)
- Aug 14, 2025
Malicious code in atomised-service (npm)
- Aug 14, 2025
Malicious code in atomicphp (npm)
Page 5690 of 6,634