Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in arcade_ceg1b_stu4q_twilight (npm)
- Aug 14, 2025
Malicious code in arcade_bjchx_77fv1_pulse (npm)
- Aug 14, 2025
Malicious code in arcade_a86zh_bj10r_mirage (npm)
- Aug 14, 2025
Malicious code in arcade_3kkqt_wa5m2_bramble (npm)
- Aug 14, 2025
Malicious code in arc-macro-s3-bucket (npm)
- Aug 14, 2025
Malicious code in arc-branch-to-cmsg (npm)
- Aug 14, 2025
Malicious code in arbprov (npm)
- Aug 14, 2025
Malicious code in arbolgen (npm)
- Aug 14, 2025
Malicious code in arandroid (npm)
- Aug 14, 2025
Malicious code in arakapub (npm)
- Aug 14, 2025
Malicious code in arabicstring (npm)
- Aug 14, 2025
Malicious code in ar_transaction_changes (npm)
- Aug 14, 2025
Malicious code in ar9_atm_project_03 (npm)
- Aug 14, 2025
Malicious code in aquarius-proxima-grunt-eclipse (npm)
- Aug 14, 2025
Malicious code in aquarius-pino-aurora-eridanus (npm)
- Aug 14, 2025
Malicious code in aquarius-entanglement-hydrogeology-geodynamo (npm)
- Aug 14, 2025
Malicious code in aquarius-elara-andromeda-equinox (npm)
- Aug 14, 2025
Malicious code in aquarius-delphinus-less-iota (npm)
- Aug 14, 2025
Malicious code in aquarius-async-prettier-gulp (npm)
- Aug 14, 2025
Malicious code in apwimgr (npm)
- Aug 14, 2025
Malicious code in apuntes (npm)
- Aug 14, 2025
Malicious code in apui (npm)
- Aug 14, 2025
Malicious code in aptrental (npm)
- Aug 14, 2025
Malicious code in aptman (npm)
- Aug 14, 2025
Malicious code in aptest (npm)
- Aug 14, 2025
Malicious code in appytw (npm)
- Aug 14, 2025
Malicious code in appyday (npm)
- Aug 14, 2025
Malicious code in appx-compiler (npm)
- Aug 14, 2025
Malicious code in appwall (npm)
- Aug 14, 2025
Malicious code in appversion-generator (npm)
- Aug 14, 2025
Malicious code in apptmpl (npm)
- Aug 14, 2025
Malicious code in appsworld (npm)
- Aug 14, 2025
Malicious code in appstor (npm)
- Aug 14, 2025
Malicious code in appsdks (npm)
- Aug 14, 2025
Malicious code in appsaholic-sdk (npm)
- Aug 14, 2025
Malicious code in apps-script-oauth2 (npm)
- Aug 14, 2025
Malicious code in approval-workflow (npm)
- Aug 14, 2025
Malicious code in approuter (npm)
- Aug 14, 2025
Malicious code in approject (npm)
- Aug 14, 2025
Malicious code in apprepo (npm)
- Aug 14, 2025
Malicious code in appointment-widget (npm)
- Aug 14, 2025
Malicious code in appmarx (npm)
- Aug 14, 2025
Malicious code in appmania (npm)
- Aug 14, 2025
Malicious code in appmake (npm)
- Aug 14, 2025
Malicious code in applovin-max-native-plugin-demo (npm)
- Aug 14, 2025
Malicious code in applitest (npm)
- Aug 14, 2025
Malicious code in applications.services.devcloud.image-search-client (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in apple_portal_sync (npm)
- Aug 14, 2025
Malicious code in apple-zucchini-strawberry-sggqf (npm)
- Aug 14, 2025
Malicious code in apple-zucchini-raspberry-glbnu (npm)
Page 5696 of 6,634