Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in acorn-kale-wqm971-project (npm)
- Aug 14, 2025
Malicious code in acorn-jupiter-0uhr (npm)
- Aug 14, 2025
Malicious code in acorn-foxtrot-cohz (npm)
- Aug 14, 2025
Malicious code in acorn-evergreen-uki208-project (npm)
- Aug 14, 2025
Malicious code in acorn-emerald-kwg033-project (npm)
- Aug 14, 2025
Malicious code in acorn-echo-oqo5 (npm)
- Aug 14, 2025
Malicious code in acorn-dolphin-wpx490-project (npm)
- Aug 14, 2025
Malicious code in acorn-dolphin-ero908-project (npm)
- Aug 14, 2025
Malicious code in acorn-boulder-awa769-project (npm)
- Aug 14, 2025
Malicious code in acollab (npm)
- Aug 14, 2025
Malicious code in acocgame (npm)
- Aug 14, 2025
Malicious code in acme-react-components (npm)
- Aug 14, 2025
Malicious code in acme-http-01-sequelize (npm)
- Aug 14, 2025
Malicious code in acme-http-01-s3 (npm)
- Aug 14, 2025
Malicious code in acme-http-01-reddis (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-lightsail (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-freedns (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-dyndns (npm)
- Aug 14, 2025
Malicious code in acmapi (npm)
- Aug 14, 2025
Malicious code in acmake (npm)
- Aug 14, 2025
Malicious code in ackwovziyxkrehjt (npm)
- Aug 14, 2025
Malicious code in acidwater (npm)
- Aug 14, 2025
Malicious code in achsynku (npm)
- Aug 14, 2025
Malicious code in achernar-typeorm-webdriver-manager-ursa (npm)
- Aug 14, 2025
Malicious code in achernar-soap-acamar-geomorphology (npm)
- Aug 14, 2025
Malicious code in achernar-restart-futurology-bionics (npm)
- Aug 14, 2025
Malicious code in achernar-pegasus-dactyl-carpo (npm)
- Aug 14, 2025
Malicious code in achernar-mensa-umbra-delphinus (npm)
- Aug 14, 2025
Malicious code in achernar-local-nucleosynthesis-mesosphere (npm)
- Aug 14, 2025
Malicious code in acghrom (npm)
- Aug 14, 2025
Malicious code in acerta-calendar-gui (npm)
- Aug 14, 2025
Malicious code in ace-one-widget-self-hosting (npm)
- Aug 14, 2025
Malicious code in accumunet (npm)
- Aug 14, 2025
Malicious code in acctla (npm)
- Aug 14, 2025
Malicious code in accretion-vulcan-testcafe-subscription (npm)
- Aug 14, 2025
Malicious code in accretion-puppeteer-pegasus-sync (npm)
- Aug 14, 2025
Malicious code in accretion-nightmare-rate-limiter-nuxtjs (npm)
- Aug 14, 2025
Malicious code in accretion-luna-materialize-process (npm)
- Aug 14, 2025
Malicious code in accretion-ichnology-koa-husky (npm)
- Aug 14, 2025
Malicious code in accretion-galaxy-accretion-eslint (npm)
- Aug 14, 2025
Malicious code in accretion-foundation-karma-paleoceanography (npm)
- Aug 14, 2025
Malicious code in accretion-cosmiconfig-telesto-pegasus (npm)
- Aug 14, 2025
Malicious code in accounts-react-components (npm)
- Aug 14, 2025
Malicious code in accounts-fonts (npm)
- Aug 14, 2025
Malicious code in account.propertyconnect (npm)
- Aug 14, 2025
Malicious code in account-manager-ui (npm)
- Aug 14, 2025
Malicious code in acclogger (npm)
- Aug 14, 2025
Malicious code in accgen (npm)
- Aug 14, 2025
Malicious code in accelerate-cli (npm)
- Aug 14, 2025
Malicious code in accela-ds-angular (npm)
Page 5711 of 6,634