Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in angular-bookly (npm)
- Aug 14, 2025
Malicious code in angular-base (npm)
- Aug 14, 2025
Malicious code in angular-4-datatable-custom (npm)
- Aug 14, 2025
Malicious code in angula (npm)
- Aug 14, 2025
Malicious code in angstroms (npm)
- Aug 14, 2025
Malicious code in angry-apes--nft-collection297 (npm)
- Aug 14, 2025
Malicious code in angluarjs (npm)
- Aug 14, 2025
Malicious code in angeloz (npm)
- Aug 14, 2025
Malicious code in anecdope (npm)
- Aug 14, 2025
Malicious code in andthen (npm)
- Aug 14, 2025
Malicious code in androtica (npm)
- Aug 14, 2025
Malicious code in andromeda-on-framework-webdriver-manager (npm)
- Aug 14, 2025
Malicious code in andromeda-middleware-lightyear-photon (npm)
- Aug 14, 2025
Malicious code in andromeda-eslint-config-graviton-ophiuchus (npm)
- Aug 14, 2025
Malicious code in andromeda-child-process-local-firebase (npm)
- Aug 14, 2025
Malicious code in andromail (npm)
- Aug 14, 2025
Malicious code in androidsc (npm)
- Aug 14, 2025
Malicious code in androidip (npm)
- Aug 14, 2025
Malicious code in andrii.bulat.ably (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in andrhello (npm)
- Aug 14, 2025
Malicious code in andre-testing-a-thing (npm)
- Aug 14, 2025
Malicious code in andplugin (npm)
- Aug 14, 2025
Malicious code in andnaviki (npm)
- Aug 14, 2025
Malicious code in andi-tiwul81-sukiwir (npm)
- Aug 14, 2025
Malicious code in andi-sambel6-sukiwir (npm)
- Aug 14, 2025
Malicious code in andi-pisang21-breki (npm)
- Aug 14, 2025
Malicious code in andi-nasi44-sukiwir (npm)
- Aug 14, 2025
Malicious code in andi-mendut88-breki (npm)
- Aug 14, 2025
Malicious code in andi-esdoger21-sukiwir (npm)
- Aug 14, 2025
Malicious code in andi-dradag80-breki (npm)
- Aug 14, 2025
Malicious code in andi-dodol30-kuki (npm)
- Aug 14, 2025
Malicious code in andi-bubursumsum43-breki (npm)
- Aug 14, 2025
Malicious code in andgame (npm)
- Aug 14, 2025
Malicious code in andamio_eru (npm)
- Aug 14, 2025
Malicious code in anchor-xigua-5yhn (npm)
- Aug 14, 2025
Malicious code in anchor-supernova-57s4 (npm)
- Aug 14, 2025
Malicious code in anchor-sierra-xn3u (npm)
- Aug 14, 2025
Malicious code in anchor-papaya-co25 (npm)
- Aug 14, 2025
Malicious code in anchor-meteor-42nk (npm)
- Aug 14, 2025
Malicious code in anchor-maple-g2od (npm)
- Aug 14, 2025
Malicious code in anchor-jalapeno-vcui (npm)
- Aug 14, 2025
Malicious code in anchor-hazel-p2fo (npm)
- Aug 14, 2025
Malicious code in anchor-airplane-zrm3 (npm)
- Aug 14, 2025
Malicious code in anatrafa (npm)
- Aug 14, 2025
Malicious code in anastasia (npm)
- Aug 14, 2025
Malicious code in anarchy (npm)
- Aug 14, 2025
Malicious code in anan-d-widgets (npm)
- Aug 14, 2025
Malicious code in analyzer-importer (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in analyze-lambda-daemon-kappa-file (npm)
- Aug 14, 2025
Malicious code in analyze-key-await-process-gamma (npm)
Page 5701 of 6,634