Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in appkeys (npm)
- Aug 14, 2025
Malicious code in appeler (npm)
- Aug 14, 2025
Malicious code in appdirect-universal-search (npm)
- Aug 14, 2025
Malicious code in appcompat (npm)
- Aug 14, 2025
Malicious code in appcapsule (npm)
- Aug 14, 2025
Malicious code in apparea (npm)
- Aug 14, 2025
Malicious code in app_profiler (npm)
- Aug 14, 2025
Malicious code in app_name (npm)
- Aug 14, 2025
Malicious code in app8888888888 (npm)
- Aug 14, 2025
Malicious code in app-shell-startpagina (npm)
- Aug 14, 2025
Malicious code in app-seed (npm)
- Aug 14, 2025
Malicious code in app-pulse-style (npm)
- Aug 14, 2025
Malicious code in app-bridge-testing-library (npm)
- Aug 14, 2025
Malicious code in app-bridge-core (npm)
- Aug 14, 2025
Malicious code in apollo-yakutsk-paleoanthropology-aurora (npm)
- Aug 14, 2025
Malicious code in apollo-spectron-cladistics-geochemistry (npm)
- Aug 14, 2025
Malicious code in apollo-regulus-commitizen-webdriverio (npm)
- Aug 14, 2025
Malicious code in apollo-nucleosynthesis-inflation-cassini (npm)
- Aug 14, 2025
Malicious code in apollo-mongodb-darkmatter-whitedwarf (npm)
- Aug 14, 2025
Malicious code in apollo-gmail-grabber (npm)
- Aug 14, 2025
Malicious code in apollo-auriga-eslint-config-version (npm)
- Aug 14, 2025
Malicious code in aplay-audio (npm)
- Aug 14, 2025
Malicious code in apkplug (npm)
- Aug 14, 2025
Malicious code in apizoo (npm)
- Aug 14, 2025
Malicious code in apiportal-backend (npm)
- Aug 14, 2025
Malicious code in api-util (npm)
- Aug 14, 2025
Malicious code in api-usage_create-tensor (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in api-shoppe-demo (npm)
- Aug 14, 2025
Malicious code in api-services (npm)
- Aug 14, 2025
Malicious code in api-security-test (npm)
- Aug 14, 2025
Malicious code in api-manh (npm)
- Aug 14, 2025
Malicious code in api-facebooknew (npm)
- Aug 14, 2025
Malicious code in api-devices (npm)
- Aug 14, 2025
Malicious code in api-chatfb-test (npm)
- Aug 14, 2025
Malicious code in api-chatfb (npm)
- Aug 14, 2025
Malicious code in api-chat-fanpage-facebook (npm)
- Aug 14, 2025
Malicious code in api-bot-basil (npm)
- Aug 14, 2025
Malicious code in apfinal (npm)
- Aug 14, 2025
Malicious code in apex-ursa-gatsby-enceladus (npm)
- Aug 14, 2025
Malicious code in apex-promise-transport-commitizen (npm)
- Aug 14, 2025
Malicious code in apex-bioinformatics-development-geodynamo (npm)
- Aug 14, 2025
Malicious code in apeksha (npm)
- Aug 14, 2025
Malicious code in ape-staking-public (npm)
- Aug 14, 2025
Malicious code in ape-portal-public (npm)
- Aug 14, 2025
Malicious code in aparapi (npm)
- Aug 14, 2025
Malicious code in apar (npm)
- Aug 14, 2025
Malicious code in ap607 (npm)
- Aug 14, 2025
Malicious code in ap-is-required-by-the-labour-digital-membership-card (npm)
- Aug 14, 2025
Malicious code in aoxkqljgedbycsif (npm)
- Aug 14, 2025
Malicious code in aou-ui-angular (npm)
Page 5698 of 6,634