Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in aicsd-web-ui (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in ahmed88521n786-todo-list (npm)
- Aug 14, 2025
Malicious code in agyl-mail (npm)
- Aug 14, 2025
Malicious code in agus-ubi28-breki (npm)
- Aug 14, 2025
Malicious code in agus-tempe97-kuki (npm)
- Aug 14, 2025
Malicious code in agus-rujak77-breki (npm)
- Aug 14, 2025
Malicious code in agus-getuk15-kuki (npm)
- Aug 14, 2025
Malicious code in agus-donat95-sukiwir (npm)
- Aug 14, 2025
Malicious code in agus-brongkos84-breki (npm)
- Aug 14, 2025
Malicious code in agplayer (npm)
- Aug 14, 2025
Malicious code in agostle (npm)
- Aug 14, 2025
Malicious code in agoltools (npm)
- Aug 14, 2025
Malicious code in aglaia (npm)
- Aug 14, 2025
Malicious code in agitable (npm)
- Aug 14, 2025
Malicious code in agileos (npm)
- Aug 14, 2025
Malicious code in agifbaig (npm)
- Aug 14, 2025
Malicious code in agetur (npm)
- Aug 14, 2025
Malicious code in agentbox (npm)
- Aug 14, 2025
Malicious code in agenelle (npm)
- Aug 14, 2025
Malicious code in agendars (npm)
- Aug 14, 2025
Malicious code in agendar (npm)
- Aug 14, 2025
Malicious code in agenbola (npm)
- Aug 14, 2025
Malicious code in agen-sbobet (npm)
- Aug 14, 2025
Malicious code in agatha (npm)
- Aug 14, 2025
Malicious code in agate-build (npm)
- Aug 14, 2025
Malicious code in afwzctxndqmrluvi (npm)
- Aug 14, 2025
Malicious code in after-time (npm)
- Aug 14, 2025
Malicious code in afronosh (npm)
- Aug 14, 2025
Malicious code in afrasa (npm)
- Aug 14, 2025
Malicious code in afondevi-generator-api-cli (npm)
- Aug 14, 2025
Malicious code in afisha-logger (npm)
- Aug 14, 2025
Malicious code in afisha-config (npm)
- Aug 14, 2025
Malicious code in afisha-ab-configurator (npm)
- Aug 14, 2025
Malicious code in afifcapcut112tea (npm)
- Aug 14, 2025
Malicious code in afifaljafari112tea (npm)
- Aug 14, 2025
Malicious code in afglobal (npm)
- Aug 14, 2025
Malicious code in affirm-assets (npm)
- Aug 14, 2025
Malicious code in affinegap (npm)
- Aug 14, 2025
Malicious code in afficheur (npm)
- Aug 14, 2025
Malicious code in affectv (npm)
- Aug 14, 2025
Malicious code in aeynrshfkolcvpjq (npm)
- Aug 14, 2025
Malicious code in aetherlog (npm)
- Aug 14, 2025
Malicious code in aether-rollup-triton-fetch (npm)
- Aug 14, 2025
Malicious code in aestest (npm)
- Aug 14, 2025
Malicious code in aertcuhmnpkyqxjf (npm)
- Aug 14, 2025
Malicious code in aerisjs (npm)
- Aug 14, 2025
Malicious code in aeqbdkzxvsthfuoc (npm)
- Aug 14, 2025
Malicious code in aedmapper (npm)
- Aug 14, 2025
Malicious code in adyen-cse-js-2mundos (npm)
- Aug 14, 2025
Malicious code in adyaxtest (npm)
Page 5708 of 6,634