Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ariel-polaris-cryovolcano-graphql (npm)
- Aug 14, 2025
Malicious code in ariary (npm)
- Aug 14, 2025
Malicious code in argos-findability-url-builder (npm)
- Aug 14, 2025
Malicious code in argo-run (npm)
- Aug 14, 2025
Malicious code in argo-post-purchase (npm)
- Aug 14, 2025
Malicious code in argo-checkout-vue (npm)
- Aug 14, 2025
Malicious code in ares-api-search (npm)
- Aug 14, 2025
Malicious code in ares-api-integrations (npm)
- Aug 14, 2025
Malicious code in areology-nightmare-selenology-configstore (npm)
- Aug 14, 2025
Malicious code in areology-mantle-lithosphere-zephyr (npm)
- Aug 14, 2025
Malicious code in areology-biogeochemistry-non-blocking-commitlint (npm)
- Aug 14, 2025
Malicious code in arenalog (npm)
- Aug 14, 2025
Malicious code in arduboard (npm)
- Aug 14, 2025
Malicious code in ardril712 (npm)
- Aug 14, 2025
Malicious code in ardosubs (npm)
- Aug 14, 2025
Malicious code in arddroid (npm)
- Aug 14, 2025
Malicious code in arcturus-server-neptunology-centaurus (npm)
- Aug 14, 2025
Malicious code in arcturus-paleoecology-proxima-eventhoriz (npm)
- Aug 14, 2025
Malicious code in arcturus-global-hermes-less-loader (npm)
- Aug 14, 2025
Malicious code in arcturus-genomics-nestjs-boson (npm)
- Aug 14, 2025
Malicious code in arcturus-carina-eslint-proxima (npm)
- Aug 14, 2025
Malicious code in arcturus-brane-test-html-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in arcturus-astrophysics-cluster-eris (npm)
- Aug 14, 2025
Malicious code in arcturo (npm)
- Aug 14, 2025
Malicious code in arctic-unicorn-qdk488-project (npm)
- Aug 14, 2025
Malicious code in arctic-river-nts792-project (npm)
- Aug 14, 2025
Malicious code in arctic-orangutan-nka823-project (npm)
- Aug 14, 2025
Malicious code in arctic-opal-xxr872-project (npm)
- Aug 14, 2025
Malicious code in arctic-nimbus-rcn239-project (npm)
- Aug 14, 2025
Malicious code in arctic-lava-ezb031-project (npm)
- Aug 14, 2025
Malicious code in arctic-kale-ntw066-project (npm)
- Aug 14, 2025
Malicious code in arcpubs (npm)
- Aug 14, 2025
Malicious code in archdoom (npm)
- Aug 14, 2025
Malicious code in archbsd (npm)
- Aug 14, 2025
Malicious code in archana (npm)
- Aug 14, 2025
Malicious code in archaeometry-umbriel-callback-io (npm)
- Aug 14, 2025
Malicious code in archaeometry-javascript-jsonp-isostasy (npm)
- Aug 14, 2025
Malicious code in archaeometry-elektra-neutronstar-promise (npm)
- Aug 14, 2025
Malicious code in archaeometry-crust-rate-limiter-sirius (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-resolvers-orogeny-electron-builder (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-nova-centauri-tool (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-deimos-avior-shelljs (npm)
- Aug 14, 2025
Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)
- Aug 14, 2025
Malicious code in arcgis-canc4isr-build (npm)
- Aug 14, 2025
Malicious code in arcade_zdy7u_55bqr_terra (npm)
- Aug 14, 2025
Malicious code in arcade_p59z5_tcsiz_pinnacle (npm)
- Aug 14, 2025
Malicious code in arcade_n7fr7_cr8m7_vista (npm)
- Aug 14, 2025
Malicious code in arcade_jt9vr_apl2t_valley (npm)
- Aug 14, 2025
Malicious code in arcade_jpqzi_hjbx2_fountain (npm)
- Aug 14, 2025
Malicious code in arcade_j6cyb_yyz51_aroma (npm)
Page 5695 of 6,634