Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in adwebsite (npm)
- Aug 14, 2025
Malicious code in advertiser-module (npm)
- Aug 14, 2025
Malicious code in advertapp (npm)
- Aug 14, 2025
Malicious code in adv-web-publishing-assignment-2 (npm)
- Aug 14, 2025
Malicious code in AdultJS (npm)
- Aug 14, 2025
Malicious code in adueband (npm)
- Aug 14, 2025
Malicious code in adthukqreywxibln (npm)
- Aug 14, 2025
Malicious code in adsdk (npm)
- Aug 14, 2025
Malicious code in adrum (npm)
- Aug 14, 2025
Malicious code in adroper (npm)
- Aug 14, 2025
Malicious code in adril7122 (npm)
- Aug 14, 2025
Malicious code in adrenline (npm)
- Aug 14, 2025
Malicious code in adp.ds.ui.actionbar (npm)
- Aug 14, 2025
Malicious code in adorn-cascade-wpn602-project (npm)
- Aug 14, 2025
Malicious code in adorn (npm)
- Aug 14, 2025
Malicious code in adonis-wezen-public-gridsome (npm)
- Aug 14, 2025
Malicious code in adonis-inquirer-redis-capella (npm)
- Aug 14, 2025
Malicious code in adonis-bootstrap-mantle-loop (npm)
- Aug 14, 2025
Malicious code in adomino (npm)
- Aug 14, 2025
Malicious code in admithub-react-diagrams (npm)
- Aug 14, 2025
Malicious code in adminsms (npm)
- Aug 14, 2025
Malicious code in adminns (npm)
- Aug 14, 2025
Malicious code in adminfun (npm)
- Aug 14, 2025
Malicious code in admindmeo (npm)
- Aug 14, 2025
Malicious code in adminci (npm)
- Aug 14, 2025
Malicious code in adminauthserv (npm)
- Aug 14, 2025
Malicious code in admin-scripts (npm)
- Aug 14, 2025
Malicious code in admhjwy (npm)
- Aug 14, 2025
Malicious code in adkxfcbvsnhpjkqm (npm)
- Aug 14, 2025
Malicious code in adjutant (npm)
- Aug 14, 2025
Malicious code in adipoli (npm)
- Aug 14, 2025
Malicious code in adform-ui-api (npm)
- Aug 14, 2025
Malicious code in adform-react-app-core (npm)
- Aug 14, 2025
Malicious code in adform-docs (npm)
- Aug 14, 2025
Malicious code in adform-data-generator (npm)
- Aug 14, 2025
Malicious code in adform-core (npm)
- Aug 14, 2025
Malicious code in adform-cli-test (npm)
- Aug 14, 2025
Malicious code in adform-cli-build (npm)
- Aug 14, 2025
Malicious code in adflowgic (npm)
- Aug 14, 2025
Malicious code in ade-tongseng62-breki (npm)
- Aug 14, 2025
Malicious code in ade-tahu10-kuki (npm)
- Aug 14, 2025
Malicious code in ade-moci82-breki (npm)
- Aug 14, 2025
Malicious code in ade-klipo27-breki (npm)
- Aug 14, 2025
Malicious code in ade-bakso53-breki (npm)
- Aug 14, 2025
Malicious code in addtaxa (npm)
- Aug 14, 2025
Malicious code in addressed (npm)
- Aug 14, 2025
Malicious code in addongit (npm)
- Aug 14, 2025
Malicious code in additor-react-grid-layout (npm)
- Aug 14, 2025
Malicious code in additor-elements-evo (npm)
- Aug 14, 2025
Malicious code in additor-elements-client (npm)
Page 5709 of 6,634