Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in atomicapp (npm)
- Aug 14, 2025
Malicious code in atom-tizentv (npm)
- Aug 14, 2025
Malicious code in atom-shell-starter (npm)
- Aug 14, 2025
Malicious code in atmpaxos (npm)
- Aug 14, 2025
Malicious code in atmohue (npm)
- Aug 14, 2025
Malicious code in atml-backend-private (npm)
- Aug 14, 2025
Malicious code in atmega (npm)
- Aug 14, 2025
Malicious code in atlatljs (npm)
- Aug 14, 2025
Malicious code in atlas_twbur_gucf4_thunder (npm)
- Aug 14, 2025
Malicious code in atlas_rm1xx_dwz3e_nectar (npm)
- Aug 14, 2025
Malicious code in atlas_ei8j7_ljtj5_lullaby (npm)
- Aug 14, 2025
Malicious code in atlas_anci1_55g1h_wander (npm)
- Aug 14, 2025
Malicious code in atlas_9loee_47sgp_nova (npm)
- Aug 14, 2025
Malicious code in atlas-rimraf-version-request (npm)
- Aug 14, 2025
Malicious code in atlas-prosthetics-procyon-cryovolcano (npm)
- Aug 14, 2025
Malicious code in atlas-morgan-antares-remark (npm)
- Aug 14, 2025
Malicious code in atlas-data (npm)
- Aug 14, 2025
Malicious code in atlas-charts (npm)
- Aug 14, 2025
Malicious code in atlas-capella-dynamo-cosmos (npm)
- Aug 14, 2025
Malicious code in athenry (npm)
- Aug 14, 2025
Malicious code in atg-all-in-wonder-player (npm)
- Aug 14, 2025
Malicious code in atfbdg (npm)
- Aug 14, 2025
Malicious code in atbash (npm)
- Aug 14, 2025
Malicious code in atbase (npm)
- Aug 14, 2025
Malicious code in at (npm)
- Aug 14, 2025
Malicious code in asyync (npm)
- Aug 14, 2025
Malicious code in asynnc (npm)
- Aug 14, 2025
Malicious code in asynd (npm)
- Aug 14, 2025
Malicious code in asynctl (npm)
- Aug 14, 2025
Malicious code in async-umbra-xenon-husky (npm)
- Aug 14, 2025
Malicious code in async-swc-plugin (npm)
- Aug 14, 2025
Malicious code in async-sed-small-xml-upsilon (npm)
- Aug 14, 2025
Malicious code in async-promise-testing (npm)
- Aug 14, 2025
Malicious code in async-paleobotany-wolf-eslint-config (npm)
- Aug 14, 2025
Malicious code in async-operation (npm)
- Aug 14, 2025
Malicious code in async-deserialize-xi-assert-shell (npm)
- Aug 14, 2025
Malicious code in async-cosmology-fomalhaut-slidev (npm)
- Aug 14, 2025
Malicious code in async-changelog-semantic-release-higgs (npm)
- Aug 14, 2025
Malicious code in async-boolean-emulate-assert-gamma (npm)
- Aug 14, 2025
Malicious code in async-authenticate-iota-cron-table (npm)
- Aug 14, 2025
Malicious code in async-apollo-standard-child-process (npm)
- Aug 14, 2025
Malicious code in asymc (npm)
- Aug 14, 2025
Malicious code in asycn (npm)
- Aug 14, 2025
Malicious code in astrotitania (npm)
- Aug 14, 2025
Malicious code in astrophysics-less-loader-archaeogenetics-chalk (npm)
- Aug 14, 2025
Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm)
- Aug 14, 2025
Malicious code in astrochemistry-interstellarmedium-speleology-blueshift (npm)
- Aug 14, 2025
Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm)
- Aug 14, 2025
Malicious code in astrochemistry-cosmicsilence-hologram-zephyr (npm)
- Aug 14, 2025
Malicious code in astrochemistry-axios-venus-sirius (npm)
Page 5691 of 6,634