Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in aoo-component (npm)
- Aug 14, 2025
Malicious code in aoisa (npm)
- Aug 14, 2025
Malicious code in aoidkwpyuveztkhj (npm)
- Aug 14, 2025
Malicious code in aog-control-panel (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in aofl-os (npm)
- Aug 14, 2025
Malicious code in aofeaofe (npm)
- Aug 14, 2025
Malicious code in anykeeper (npm)
- Aug 14, 2025
Malicious code in anviltop (npm)
- Aug 14, 2025
Malicious code in anushok (npm)
- Aug 14, 2025
Malicious code in anupam-action-test (npm)
- Aug 14, 2025
Malicious code in anup-database (npm)
- Aug 14, 2025
Malicious code in antwatch (npm)
- Aug 14, 2025
Malicious code in antsui (npm)
- Aug 14, 2025
Malicious code in antsim (npm)
- Aug 14, 2025
Malicious code in antraege (npm)
- Aug 14, 2025
Malicious code in antorrent (npm)
- Aug 14, 2025
Malicious code in antoinek (npm)
- Aug 14, 2025
Malicious code in antlr4-graps (npm)
- Aug 14, 2025
Malicious code in antishell (npm)
- Aug 14, 2025
Malicious code in antimatter-xanadu-public-primatology (npm)
- Aug 14, 2025
Malicious code in antimatter-rest-gacrux-blueshift (npm)
- Aug 14, 2025
Malicious code in antimatter-gravitationalwave-kuiperbelt-geckodriver (npm)
- Aug 14, 2025
Malicious code in antimatter-cryonics-virgo-leda (npm)
- Aug 14, 2025
Malicious code in antilag (npm)
- Aug 14, 2025
Malicious code in antfiles (npm)
- Aug 14, 2025
Malicious code in antelope_xmlub_1t8ud_jigsaw (npm)
- Aug 14, 2025
Malicious code in antelope_rd0s2_uv1ld_zenith (npm)
- Aug 14, 2025
Malicious code in antelope_r9x25_1ixrg_dawn (npm)
- Aug 14, 2025
Malicious code in antelope_h1x5l_5jmi8_fern (npm)
- Aug 14, 2025
Malicious code in antelope_cdxnp_ajowy_harmony (npm)
- Aug 14, 2025
Malicious code in antelope_4t8ud_z3i7p_fern (npm)
- Aug 14, 2025
Malicious code in antd-socketio-mui-palynology (npm)
- Aug 14, 2025
Malicious code in antd-lint-loopback-spawn (npm)
- Aug 14, 2025
Malicious code in antd-geodynamo-karma-darkenergy (npm)
- Aug 14, 2025
Malicious code in antd-cloud (npm)
- Aug 14, 2025
Malicious code in antbot (npm)
- Aug 14, 2025
Malicious code in antares-wavefunction-biosignature-magellan (npm)
- Aug 14, 2025
Malicious code in antares-tethys-cygnus-antimatter (npm)
- Aug 14, 2025
Malicious code in antares-stratosphere-darkmatter-oscillation (npm)
- Aug 14, 2025
Malicious code in antares-sirius-hydra-auriga (npm)
- Aug 14, 2025
Malicious code in antares-non-blocking-inflation-html-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in antares-library-auth0-supervisor (npm)
- Aug 14, 2025
Malicious code in antares-jsonp-blitz-proteomics (npm)
- Aug 14, 2025
Malicious code in antares-interstellarmedium-biohacking-markdown-pdf (npm)
- Aug 14, 2025
Malicious code in antares-geoarchaeology-robotics-geckodriver (npm)
- Aug 14, 2025
Malicious code in antares-ganymede-archaeometry-titan (npm)
- Aug 14, 2025
Malicious code in antares-chai-umbra-orbit (npm)
- Aug 14, 2025
Malicious code in antares-carpo-bionics-fermiparadox (npm)
- Aug 14, 2025
Malicious code in antares-biosignature-titan-impulse (npm)
- Aug 14, 2025
Malicious code in ant-zeppelin-csy326-project (npm)
Page 5699 of 6,634