Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in amazing-time-picker-ng6-view24h (npm)
- Aug 14, 2025
Malicious code in AmateurJS (npm)
- Aug 14, 2025
Malicious code in amarium (npm)
- Aug 14, 2025
Malicious code in amargir (npm)
- Aug 14, 2025
Malicious code in amanah (npm)
- Aug 14, 2025
Malicious code in amadeus-api (npm)
- Aug 14, 2025
Malicious code in amabus (npm)
- Aug 14, 2025
Malicious code in alummap (npm)
- Aug 14, 2025
Malicious code in aluito (npm)
- Aug 14, 2025
Malicious code in aluedeke (npm)
- Aug 14, 2025
Malicious code in altlux (npm)
- Aug 14, 2025
Malicious code in altiora (npm)
- Aug 14, 2025
Malicious code in altimo (npm)
- Aug 14, 2025
Malicious code in altenberg (npm)
- Aug 14, 2025
Malicious code in altech (npm)
- Aug 14, 2025
Malicious code in altaris (npm)
- Aug 14, 2025
Malicious code in altair-publish-semantic-ui-prompts (npm)
- Aug 14, 2025
Malicious code in altair-prettier-stylelint-mdx-aurora (npm)
- Aug 14, 2025
Malicious code in altair-prettier-node-config-prosthetics (npm)
- Aug 14, 2025
Malicious code in altair-helios-start-sass-loader (npm)
- Aug 14, 2025
Malicious code in alsrep (npm)
- Aug 14, 2025
Malicious code in alpharex (npm)
- Aug 14, 2025
Malicious code in alphard-transhumanism-venus-configstore (npm)
- Aug 14, 2025
Malicious code in alphard-ganymede-xanadu-apollo (npm)
- Aug 14, 2025
Malicious code in alphacore (npm)
- Aug 14, 2025
Malicious code in alpha-zucchini-qshi (npm)
- Aug 14, 2025
Malicious code in alpha-xray-mango-onsij (npm)
- Aug 14, 2025
Malicious code in alpha-xigua-jq3q (npm)
- Aug 14, 2025
Malicious code in alpha-whiskey-gmaf (npm)
- Aug 14, 2025
Malicious code in alpha-watermelon-zulu-rwjvq (npm)
- Aug 14, 2025
Malicious code in alpha-watermelon-hpnx (npm)
- Aug 14, 2025
Malicious code in alpha-victor-honeydew-jvhvu (npm)
- Aug 14, 2025
Malicious code in alpha-vanilla-orange-qoopq (npm)
- Aug 14, 2025
Malicious code in alpha-vanilla-india-dicka (npm)
- Aug 14, 2025
Malicious code in alpha-tau-project (npm)
- Aug 14, 2025
Malicious code in alpha-tango-pwpu (npm)
- Aug 14, 2025
Malicious code in alpha-tangerine-grape-yuxde (npm)
- Aug 14, 2025
Malicious code in alpha-strawberry-whiskey-shbqd (npm)
- Aug 14, 2025
Malicious code in alpha-rqf-project (npm)
- Aug 14, 2025
Malicious code in alpha-quince-iesi (npm)
- Aug 14, 2025
Malicious code in alpha-papa-zucchini-ldemp (npm)
- Aug 14, 2025
Malicious code in alpha-oz5-project (npm)
- Aug 14, 2025
Malicious code in alpha-oscar-aavv (npm)
- Aug 14, 2025
Malicious code in alpha-orange-vplc (npm)
- Aug 14, 2025
Malicious code in alpha-orange-ryxk (npm)
- Aug 14, 2025
Malicious code in alpha-orange-jjww (npm)
- Aug 14, 2025
Malicious code in alpha-november-ogvb (npm)
- Aug 14, 2025
Malicious code in alpha-november-ivsh (npm)
- Aug 14, 2025
Malicious code in alpha-nectarine-hekq (npm)
- Aug 14, 2025
Malicious code in alpha-nb1-project (npm)
Page 5703 of 6,634