Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in analytics-paypal (npm)
- Aug 14, 2025
Malicious code in analytics-here-hac (npm)
- Aug 14, 2025
Malicious code in analast (npm)
- Aug 14, 2025
Malicious code in anairc (npm)
- Aug 14, 2025
Malicious code in anacrusis (npm)
- Aug 14, 2025
Malicious code in an0n-chat-lib (npm)
- Aug 14, 2025
Malicious code in amzn (npm)
- Aug 14, 2025
Malicious code in amsgroupl (npm)
- Aug 14, 2025
Malicious code in ams-iframe-injector (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in amqplib-rpc2 (npm)
- Aug 14, 2025
Malicious code in ampulet (npm)
- Aug 14, 2025
Malicious code in ampseed (npm)
- Aug 14, 2025
Malicious code in ampscript (npm)
- Aug 14, 2025
Malicious code in amphitryo (npm)
- Aug 14, 2025
Malicious code in amongushacksv3 (npm)
- Aug 14, 2025
Malicious code in amongushacksv2 (npm)
- Aug 14, 2025
Malicious code in amongushacksv1 (npm)
- Aug 14, 2025
Malicious code in amongushacks2021 (npm)
- Aug 14, 2025
Malicious code in amongushacks (npm)
- Aug 14, 2025
Malicious code in amnhcms (npm)
- Aug 14, 2025
Malicious code in amethyst-ztku8-20y7b-jungle-project (npm)
- Aug 14, 2025
Malicious code in amethyst-kzlga-fybv8-ultra-project (npm)
- Aug 14, 2025
Malicious code in amethyst-4swde-b4vlx-lunar-project (npm)
- Aug 14, 2025
Malicious code in amethyst-301km-w9k8k-indigo-project (npm)
- Aug 14, 2025
Malicious code in amethyst-2b7d4-vsh0l-dusk-project (npm)
- Aug 14, 2025
Malicious code in ambula (npm)
- Aug 14, 2025
Malicious code in amber-w4un6-443ll-verdure-project (npm)
- Aug 14, 2025
Malicious code in amber-sunset-sha689-project (npm)
- Aug 14, 2025
Malicious code in amber-river-ckc313-project (npm)
- Aug 14, 2025
Malicious code in amber-qx1i3-7cfzu-ultra-project (npm)
- Aug 14, 2025
Malicious code in amber-pulse-olu886-project (npm)
- Aug 14, 2025
Malicious code in amber-pinnacle-xei075-project (npm)
- Aug 14, 2025
Malicious code in amber-nugget-uvx187-project (npm)
- Aug 14, 2025
Malicious code in amber-mountain-gab870-project (npm)
- Aug 14, 2025
Malicious code in amber-kbnjp-iif76-ice-project (npm)
- Aug 14, 2025
Malicious code in amber-jewel-kov220-project (npm)
- Aug 14, 2025
Malicious code in amber-jasmine-psc655-project (npm)
- Aug 14, 2025
Malicious code in amber-island-zky964-project (npm)
- Aug 14, 2025
Malicious code in amber-iscjq-l9twm-mirage-project (npm)
- Aug 14, 2025
Malicious code in amber-icicle-daq039-project (npm)
- Aug 14, 2025
Malicious code in amber-elephant-tvc905-project (npm)
- Aug 14, 2025
Malicious code in amber-dewdrop-fao020-project (npm)
- Aug 14, 2025
Malicious code in amber-c01v5-2pxof-mosaic-project (npm)
- Aug 14, 2025
Malicious code in amber-bamboo-hbl309-project (npm)
- Aug 14, 2025
Malicious code in amber-5r5lg-4vcob-reef-project (npm)
- Aug 14, 2025
Malicious code in amber-4k3vc-ldzlm-silk-project (npm)
- Aug 14, 2025
Malicious code in amber-3xkmt-i6kwj-moondust-project (npm)
- Aug 14, 2025
Malicious code in ambassador-robots (npm)
- Aug 14, 2025
Malicious code in ambassador-node (npm)
- Aug 14, 2025
Malicious code in amazon-titan-inpainting-pipeline (npm)
Page 5702 of 6,634