Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in aspen-paradise-kst547-project (npm)
- Aug 14, 2025
Malicious code in aspen-octopus-iaj797-project (npm)
- Aug 14, 2025
Malicious code in aspen-kiwi-zry149-project (npm)
- Aug 14, 2025
Malicious code in aspen-kiwi-map642-project (npm)
- Aug 14, 2025
Malicious code in aspen-kale-cig976-project (npm)
- Aug 14, 2025
Malicious code in aspen-honeycomb-kba226-project (npm)
- Aug 14, 2025
Malicious code in aspen-cliff-mrd813-project (npm)
- Aug 14, 2025
Malicious code in aspen-boulder-hpk856-project (npm)
- Aug 14, 2025
Malicious code in aspen-bamboo-zcg358-project (npm)
- Aug 14, 2025
Malicious code in aspen-8w0r9-pjzoz-silk-project (npm)
- Aug 14, 2025
Malicious code in aspen-11t6o-1wdye-haven-project (npm)
- Aug 14, 2025
Malicious code in asos-web-secure-script-container (npm)
- Aug 14, 2025
Malicious code in asojiwbiwe (npm)
- Aug 14, 2025
Malicious code in asnyc (npm)
- Aug 14, 2025
Malicious code in asnc (npm)
- Aug 14, 2025
Malicious code in asmcrypto (npm)
- Aug 14, 2025
Malicious code in aslodocs (npm)
- Aug 14, 2025
Malicious code in asinc (npm)
- Aug 14, 2025
Malicious code in asign-user-front-end (npm)
- Aug 14, 2025
Malicious code in asianhallinta-secret (npm)
- Aug 14, 2025
Malicious code in ashore (npm)
- Aug 14, 2025
Malicious code in ashok-angular2-login (npm)
- Aug 14, 2025
Malicious code in ash-q3gt7-hrboq-whisper-project (npm)
- Aug 14, 2025
Malicious code in ash-profile (npm)
- Aug 14, 2025
Malicious code in ash-history (npm)
- Aug 14, 2025
Malicious code in ash-drag-drop (npm)
- Aug 14, 2025
Malicious code in ash-cwnhs-8s6qq-mirage-project (npm)
- Aug 14, 2025
Malicious code in ash-bmadi-535bf-fjord-project (npm)
- Aug 14, 2025
Malicious code in ash-5n1ax-68m0q-cascade-project (npm)
- Aug 14, 2025
Malicious code in ash-5grfr-jsbt8-crystal-project (npm)
- Aug 14, 2025
Malicious code in ash-1fcz8-nntfy-paradise-project (npm)
- Aug 14, 2025
Malicious code in asghar (npm)
- Aug 14, 2025
Malicious code in aseturtle (npm)
- Aug 14, 2025
Malicious code in asembed (npm)
- Aug 14, 2025
Malicious code in asdfdsdfsdf (npm)
- Aug 14, 2025
Malicious code in asdaww3243d (npm)
- Aug 14, 2025
Malicious code in asd-tt (npm)
- Aug 14, 2025
Malicious code in asatoafm (npm)
- Aug 14, 2025
Malicious code in asa-demo-node (npm)
- Aug 14, 2025
Malicious code in as-core-ui (npm)
- Aug 14, 2025
Malicious code in arwallgs3ivfw3jqzgqihqt9qajrv3tr (npm)
- Aug 14, 2025
Malicious code in artyom (npm)
- Aug 14, 2025
Malicious code in artycok (npm)
- Aug 14, 2025
Malicious code in artschool (npm)
- Aug 14, 2025
Malicious code in artmatch (npm)
- Aug 14, 2025
Malicious code in artmaster (npm)
- Aug 14, 2025
Malicious code in artless (npm)
- Aug 14, 2025
Malicious code in artistmap (npm)
- Aug 14, 2025
Malicious code in artisone (npm)
- Aug 14, 2025
Malicious code in article-curation (npm)
Page 5693 of 6,634