Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in additor-elements (npm)
- Aug 14, 2025
Malicious code in additem (npm)
- Aug 14, 2025
Malicious code in add-users (npm)
- Aug 14, 2025
Malicious code in add-user (npm)
- Aug 14, 2025
Malicious code in add-dictionary (npm)
- Aug 14, 2025
Malicious code in adcm-web2 (npm)
- Aug 14, 2025
Malicious code in adbputty (npm)
- Aug 14, 2025
Malicious code in adawong (npm)
- Aug 14, 2025
Malicious code in adacgh (npm)
- Aug 14, 2025
Malicious code in acydienmwkjkltrp (npm)
- Aug 14, 2025
Malicious code in acyclovir (npm)
- Aug 14, 2025
Malicious code in acvlib (npm)
- Aug 14, 2025
Malicious code in actusjsmath (npm)
- Aug 14, 2025
Malicious code in actual-free-xbox-codes686 (npm)
- Aug 14, 2025
Malicious code in actual-free-xbox-codes008 (npm)
- Aug 14, 2025
Malicious code in actordata (npm)
- Aug 14, 2025
Malicious code in activscreen-player (npm)
- Aug 14, 2025
Malicious code in activity-reader (npm)
- Aug 14, 2025
Malicious code in activesplit (npm)
- Aug 14, 2025
Malicious code in activeresource-statsd (npm)
- Aug 14, 2025
Malicious code in activerecord-rescue_from_duplicate (npm)
- Aug 14, 2025
Malicious code in activerecord-pedantmysql2-adapter (npm)
- Aug 14, 2025
Malicious code in activerecord-firewall (npm)
- Aug 14, 2025
Malicious code in activerecord-databasevalidations (npm)
- Aug 14, 2025
Malicious code in activepip (npm)
- Aug 14, 2025
Malicious code in activephp (npm)
- Aug 14, 2025
Malicious code in activemerchant (npm)
- Aug 14, 2025
Malicious code in activeextract (npm)
- Aug 14, 2025
Malicious code in active_utils (npm)
- Aug 14, 2025
Malicious code in active_shipping (npm)
- Aug 14, 2025
Malicious code in active_fulfillment (npm)
- Aug 14, 2025
Malicious code in actions-workflow-tools (npm)
- Aug 14, 2025
Malicious code in actions-utils (npm)
- Aug 14, 2025
Malicious code in actionkid (npm)
- Aug 14, 2025
Malicious code in actionaid (npm)
- Aug 14, 2025
Malicious code in acte.js (npm)
- Aug 14, 2025
Malicious code in actaeon (npm)
- Aug 14, 2025
Malicious code in acta365 (npm)
- Aug 14, 2025
Malicious code in acrobatt (npm)
- Aug 14, 2025
Malicious code in acornsdk (npm)
- Aug 14, 2025
Malicious code in acorn-ziggurat-9qqq (npm)
- Aug 14, 2025
Malicious code in acorn-zenith-ggw565-project (npm)
- Aug 14, 2025
Malicious code in acorn-zenith-8zk2 (npm)
- Aug 14, 2025
Malicious code in acorn-xerus-ttd391-project (npm)
- Aug 14, 2025
Malicious code in acorn-uranium-gfx680-project (npm)
- Aug 14, 2025
Malicious code in acorn-underpass-0v2r (npm)
- Aug 14, 2025
Malicious code in acorn-redshift-ai8b (npm)
- Aug 14, 2025
Malicious code in acorn-orbit-0iwi (npm)
- Aug 14, 2025
Malicious code in acorn-opal-gwa884-project (npm)
- Aug 14, 2025
Malicious code in acorn-mist-hcf992-project (npm)
Page 5710 of 6,634