Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in acamar-paleoecology-upgrade-cosmology (npm)
- Aug 14, 2025
Malicious code in acamar-acamar-cz-conventional-changelog-solis (npm)
- Aug 14, 2025
Malicious code in acadgild (npm)
- Aug 14, 2025
Malicious code in ac1 (npm)
- Aug 14, 2025
Malicious code in ac-window-delegate (npm)
- Aug 14, 2025
Malicious code in ac-element-tracker (npm)
- Aug 14, 2025
Malicious code in ac-dom-traversal (npm)
- Aug 14, 2025
Malicious code in ac-dom-metrics (npm)
- Aug 14, 2025
Malicious code in ac-dom-emitter (npm)
- Aug 14, 2025
Malicious code in ac-console (npm)
- Aug 14, 2025
Malicious code in ac-addon (npm)
- Aug 14, 2025
Malicious code in abstract-permission-root-kappa-deploy (npm)
- Aug 14, 2025
Malicious code in absolver (npm)
- Aug 14, 2025
Malicious code in abroad (npm)
- Aug 14, 2025
Malicious code in abprofile (npm)
- Aug 14, 2025
Malicious code in aboutabhishek1859 (npm)
- Aug 14, 2025
Malicious code in ablejimmy (npm)
- Aug 14, 2025
Malicious code in ablation-gammarayburst-betelgeuse-protractor (npm)
- Aug 14, 2025
Malicious code in ablation-dotenv-safe-coronalmassejection-non-blocking (npm)
- Aug 14, 2025
Malicious code in abiogenesis-webpack-innercore-request (npm)
- Aug 14, 2025
Malicious code in abiogenesis-luminescence-uglify-js-mesosphere (npm)
- Aug 14, 2025
Malicious code in abiogenesis-cosmochemistry-palynology-gulp (npm)
- Aug 14, 2025
Malicious code in abiogenesis-astroinformatics-europa-superflare (npm)
- Aug 14, 2025
Malicious code in abinothac (npm)
- Aug 14, 2025
Malicious code in abide-yearn-lze294-project (npm)
- Aug 14, 2025
Malicious code in abi-pack-framework (npm)
- Aug 14, 2025
Malicious code in abhijeet (npm)
- Aug 14, 2025
Malicious code in abcde (npm)
- Aug 14, 2025
Malicious code in abartelsmeier-test (npm)
- Aug 14, 2025
Malicious code in abarcards (npm)
- Aug 14, 2025
Malicious code in abakuc-localizer (npm)
- Aug 14, 2025
Malicious code in aave (npm)
- Aug 14, 2025
Malicious code in aasync (npm)
- Aug 14, 2025
Malicious code in aanimal (npm)
- Aug 14, 2025
Malicious code in aaaie-cheese-nips (npm)
- Aug 14, 2025
Malicious code in aaaaaaaaaawesome0.246384459780529140.8566083267989892 (npm)
- Aug 14, 2025
Malicious code in aa-bb-xx (npm)
- Aug 14, 2025
Malicious code in a5ovsk (npm)
- Aug 14, 2025
Malicious code in a2z-promo-tool (npm)
- Aug 14, 2025
Malicious code in a12l-types (npm)
- Aug 14, 2025
Malicious code in a12l-components (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-sonic-boom-5n6il-dbjjlw (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-parachutes-1-3x39a-diweqq (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-los-angeles-1-79b00-rduaef (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-emika-xmauh-mdepdk (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-celestial-lineage-vy1yv-mrqeyp (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-a-thing-called-the-divine-fits-zkxbj-wjiufg (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-9447-dots-and-loops-ee4hh-qjicit (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-86031-the-multiplication-table-gooza-naepif (npm)
- Aug 14, 2025
Malicious code in a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf (npm)
Page 5712 of 6,634