Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in arthur-utils (npm)
- Aug 14, 2025
Malicious code in arthur-middleware (npm)
- Aug 14, 2025
Malicious code in arthur-lib (npm)
- Aug 14, 2025
Malicious code in artbit (npm)
- Aug 14, 2025
Malicious code in arsgit (npm)
- Aug 14, 2025
Malicious code in arsenic-tabasco-cyborg-peanut-butter (npm)
- Aug 14, 2025
Malicious code in arroute (npm)
- Aug 14, 2025
Malicious code in arrdril712 (npm)
- Aug 14, 2025
Malicious code in array-xi-hot-psi-psi (npm)
- Aug 14, 2025
Malicious code in array-wind-user-data-rain (npm)
- Aug 14, 2025
Malicious code in array-routes (npm)
- Aug 14, 2025
Malicious code in array-join-seperators (npm)
- Aug 14, 2025
Malicious code in array-hash-view-balance-authenticate (npm)
- Aug 14, 2025
Malicious code in array-compress (npm)
- Aug 14, 2025
Malicious code in array-byte-code-reject-promise (npm)
- Aug 14, 2025
Malicious code in arrastar (npm)
- Aug 14, 2025
Malicious code in arquletia (npm)
- Aug 14, 2025
Malicious code in aroma_ck6a6_vhulq_molecule (npm)
- Aug 14, 2025
Malicious code in aroma_bk5ic_dck54_unity (npm)
- Aug 14, 2025
Malicious code in aroma_aquf5_et51g_valley (npm)
- Aug 14, 2025
Malicious code in aroma_7a5jh_i2iev_bloom (npm)
- Aug 14, 2025
Malicious code in aroma-zenith-wgc295-project (npm)
- Aug 14, 2025
Malicious code in aroma-willow-cpn475-project (npm)
- Aug 14, 2025
Malicious code in aroma-waterfall-dla825-project (npm)
- Aug 14, 2025
Malicious code in aroma-sequoia-wyi469-project (npm)
- Aug 14, 2025
Malicious code in aroma-quilt-nwa771-project (npm)
- Aug 14, 2025
Malicious code in aroma-quilt-nfr154-project (npm)
- Aug 14, 2025
Malicious code in aroma-octopus-chu398-project (npm)
- Aug 14, 2025
Malicious code in aroma-meadow-wkc728-project (npm)
- Aug 14, 2025
Malicious code in aroma-forest-lqc825-project (npm)
- Aug 14, 2025
Malicious code in aroma-ecosystem-gsn760-project (npm)
- Aug 14, 2025
Malicious code in aroma-cat-tex268-project (npm)
- Aug 14, 2025
Malicious code in aroma-butterfly-dtz487-project (npm)
- Aug 14, 2025
Malicious code in arnavag (npm)
- Aug 14, 2025
Malicious code in armusdb (npm)
- Aug 14, 2025
Malicious code in armsrace (npm)
- Aug 14, 2025
Malicious code in armoauth (npm)
- Aug 14, 2025
Malicious code in armfly (npm)
- Aug 14, 2025
Malicious code in armageddon-installer (npm)
- Aug 14, 2025
Malicious code in armageddon-client-desktop (npm)
- Aug 14, 2025
Malicious code in armada-dev (npm)
- Aug 14, 2025
Malicious code in arkadiko-dao-landing (npm)
- Aug 14, 2025
Malicious code in arkadiko-dao (npm)
- Aug 14, 2025
Malicious code in ark-survival-ancient-amber-generator (npm)
- Aug 14, 2025
Malicious code in aritawd (npm)
- Aug 14, 2025
Malicious code in arikatoh (npm)
- Aug 14, 2025
Malicious code in arif-empal97-breki (npm)
- Aug 14, 2025
Malicious code in arif-dradag90-sukiwir (npm)
- Aug 14, 2025
Malicious code in aries-toolbox (npm)
- Aug 14, 2025
Malicious code in ariel-solarnebula-webpack-auth (npm)
Page 5694 of 6,634