Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in astrobiology-singularity-phoebe-venus (npm)
- Aug 14, 2025
Malicious code in astro-xenon-restart-capella (npm)
- Aug 14, 2025
Malicious code in astro-publish-sedna-indus (npm)
- Aug 14, 2025
Malicious code in astro-postgres-init-oauth (npm)
- Aug 14, 2025
Malicious code in astro-neptune-ariel-antimatter (npm)
- Aug 14, 2025
Malicious code in astro-colors-sagitta-cors (npm)
- Aug 14, 2025
Malicious code in astro-cache-ablation-css-loader (npm)
- Aug 14, 2025
Malicious code in asthenosphere-superposition-troposphere-carina (npm)
- Aug 14, 2025
Malicious code in asteroid-yard-rfs559-project (npm)
- Aug 14, 2025
Malicious code in asteroid-xenon-xot613-project (npm)
- Aug 14, 2025
Malicious code in asteroid-vortex-avk169-project (npm)
- Aug 14, 2025
Malicious code in asteroid-vine-qnk968-project (npm)
- Aug 14, 2025
Malicious code in asteroid-supernova-5xbi (npm)
- Aug 14, 2025
Malicious code in asteroid-redshift-xtlf (npm)
- Aug 14, 2025
Malicious code in asteroid-quasar-wk9r (npm)
- Aug 14, 2025
Malicious code in asteroid-pebble-ctd957-project (npm)
- Aug 14, 2025
Malicious code in asteroid-paradise-pee257-project (npm)
- Aug 14, 2025
Malicious code in asteroid-orchid-xvb262-project (npm)
- Aug 14, 2025
Malicious code in asteroid-lagoon-dpn557-project (npm)
- Aug 14, 2025
Malicious code in asteroid-hotel-rii0 (npm)
- Aug 14, 2025
Malicious code in asteroid-gacrux-husky-slides (npm)
- Aug 14, 2025
Malicious code in asteroid-everest-dok969-project (npm)
- Aug 14, 2025
Malicious code in asteroid-cascade-lik762-project (npm)
- Aug 14, 2025
Malicious code in asteroid-andromeda-superagent-terser (npm)
- Aug 14, 2025
Malicious code in asteroid-alpha-ad0m (npm)
- Aug 14, 2025
Malicious code in assignment-2-calendar (npm)
- Aug 14, 2025
Malicious code in assignment-02 (npm)
- Aug 14, 2025
Malicious code in assigment (npm)
- Aug 14, 2025
Malicious code in assetslush (npm)
- Aug 14, 2025
Malicious code in asset_pipeline (npm)
- Aug 14, 2025
Malicious code in asset_cloud (npm)
- Aug 14, 2025
Malicious code in asset-viewer (npm)
- Aug 14, 2025
Malicious code in asset-pipeline-yaml-combiner (npm)
- Aug 14, 2025
Malicious code in assert-tau-eta-good-earth (npm)
- Aug 14, 2025
Malicious code in assert-new-compress-mu-key (npm)
- Aug 14, 2025
Malicious code in assapir-test25 (npm)
- Aug 14, 2025
Malicious code in asrulalfi (npm)
- Aug 14, 2025
Malicious code in asprom (npm)
- Aug 14, 2025
Malicious code in asproject (npm)
- Aug 14, 2025
Malicious code in asphalt-9-legends-tokens-generator (npm)
- Aug 14, 2025
Malicious code in aspen_m90z2_ktm1h_cascade (npm)
- Aug 14, 2025
Malicious code in aspen_l9ycs_blrki_zinnia (npm)
- Aug 14, 2025
Malicious code in aspen_8afsh_ugcnk_cascade (npm)
- Aug 14, 2025
Malicious code in aspen_6uohn_zqr7i_kismet (npm)
- Aug 14, 2025
Malicious code in aspen-yak-uhn020-project (npm)
- Aug 14, 2025
Malicious code in aspen-xerus-erj514-project (npm)
- Aug 14, 2025
Malicious code in aspen-xerox-hrj009-project (npm)
- Aug 14, 2025
Malicious code in aspen-whale-ygr161-project (npm)
- Aug 14, 2025
Malicious code in aspen-spruce-sfr848-project (npm)
- Aug 14, 2025
Malicious code in aspen-river-maz094-project (npm)
Page 5692 of 6,634