Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ant-yellow-yjs130-project (npm)
- Aug 14, 2025
Malicious code in ant-yawn-wlv896-project (npm)
- Aug 14, 2025
Malicious code in ant-xenon-bat763-project (npm)
- Aug 14, 2025
Malicious code in ant-rose-klv704-project (npm)
- Aug 14, 2025
Malicious code in ant-peacock-wmb879-project (npm)
- Aug 14, 2025
Malicious code in ant-opaline-sqh328-project (npm)
- Aug 14, 2025
Malicious code in ant-opal-qdx297-project (npm)
- Aug 14, 2025
Malicious code in ant-octopus-vug860-project (npm)
- Aug 14, 2025
Malicious code in ant-nimbus-nhr067-project (npm)
- Aug 14, 2025
Malicious code in ant-mangrove-kah880-project (npm)
- Aug 14, 2025
Malicious code in ant-jade-hfv892-project (npm)
- Aug 14, 2025
Malicious code in ant-galaxy-sti865-project (npm)
- Aug 14, 2025
Malicious code in ant-fox-fvm110-project (npm)
- Aug 14, 2025
Malicious code in ant-forest-ucj519-project (npm)
- Aug 14, 2025
Malicious code in ant-forest-hla676-project (npm)
- Aug 14, 2025
Malicious code in ant-dolphin-kzm576-project (npm)
- Aug 14, 2025
Malicious code in ant-dolphin-ekh060-project (npm)
- Aug 14, 2025
Malicious code in ant-cliff-aui668-project (npm)
- Aug 14, 2025
Malicious code in answers-search-ui (npm)
- Aug 14, 2025
Malicious code in ansi-codes (npm)
- Aug 14, 2025
Malicious code in anroidapp (npm)
- Aug 14, 2025
Malicious code in anorien (npm)
- Aug 14, 2025
Malicious code in anonsurf (npm)
- Aug 14, 2025
Malicious code in announcesir (npm)
- Aug 14, 2025
Malicious code in annisazanniba-tea (npm)
- Aug 14, 2025
Malicious code in annexcv (npm)
- Aug 14, 2025
Malicious code in annex_29 (npm)
- Aug 14, 2025
Malicious code in ankerias (npm)
- Aug 14, 2025
Malicious code in anivid (npm)
- Aug 14, 2025
Malicious code in anionic (npm)
- Aug 14, 2025
Malicious code in aninha (npm)
- Aug 14, 2025
Malicious code in animalrightshistory_888 (npm)
- Aug 14, 2025
Malicious code in animalrightshistory (npm)
- Aug 14, 2025
Malicious code in aniadd (npm)
- Aug 14, 2025
Malicious code in angunote (npm)
- Aug 14, 2025
Malicious code in angulin (npm)
- Aug 14, 2025
Malicious code in angularjs-in-view (npm)
- Aug 14, 2025
Malicious code in angulargp (npm)
- Aug 14, 2025
Malicious code in angular2-security (npm)
- Aug 14, 2025
Malicious code in angular2-safe-provider (npm)
- Aug 14, 2025
Malicious code in angular-webpart (npm)
- Aug 14, 2025
Malicious code in angular-truncate (npm)
- Aug 14, 2025
Malicious code in angular-rs-alerts (npm)
- Aug 14, 2025
Malicious code in angular-portal-azure (npm)
- Aug 14, 2025
Malicious code in angular-leveled-reader (npm)
- Aug 14, 2025
Malicious code in angular-hw-cache (npm)
- Aug 14, 2025
Malicious code in angular-dynamic-html (npm)
- Aug 14, 2025
Malicious code in angular-dt-relay (npm)
- Aug 14, 2025
Malicious code in angular-cli-library-builder (npm)
- Aug 14, 2025
Malicious code in angular-cli-autoprefixer (npm)
Page 5700 of 6,634