Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in statom (npm)
- Aug 14, 2025
Malicious code in stationery-themes (npm)
- Aug 14, 2025
Malicious code in static-view-bad-easy-tree (npm)
- Aug 14, 2025
Malicious code in static-jmodule (npm)
- Aug 14, 2025
Malicious code in starwars-names-lib2 (npm)
- Aug 14, 2025
Malicious code in start-scorpius-toml-build (npm)
- Aug 14, 2025
Malicious code in start-quito-pino-kardashevscale (npm)
- Aug 14, 2025
Malicious code in stars-colors (npm)
- Aug 14, 2025
Malicious code in stars-color (npm)
- Aug 14, 2025
Malicious code in starmaint (npm)
- Aug 14, 2025
Malicious code in starkok (npm)
- Aug 14, 2025
Malicious code in starii (npm)
- Aug 14, 2025
Malicious code in stardork (npm)
- Aug 14, 2025
Malicious code in starcrash (npm)
- Aug 14, 2025
Malicious code in starchup-integrator (npm)
- Aug 14, 2025
Malicious code in starbucks (npm)
- Aug 14, 2025
Malicious code in star-xcscn-3co6s-moonlight-project (npm)
- Aug 14, 2025
Malicious code in star-x0bar-6z7rk-kelp-project (npm)
- Aug 14, 2025
Malicious code in star-volcano-sfm016-project (npm)
- Aug 14, 2025
Malicious code in star-violet-rum512-project (npm)
- Aug 14, 2025
Malicious code in star-topaz-rxz949-project (npm)
- Aug 14, 2025
Malicious code in star-tide-efs535-project (npm)
- Aug 14, 2025
Malicious code in star-thunder-ija894-project (npm)
- Aug 14, 2025
Malicious code in star-t8z5p-kwjzn-fern-project (npm)
- Aug 14, 2025
Malicious code in star-su6b7-28fkl-quasar-project (npm)
- Aug 14, 2025
Malicious code in star-spruce-ftf365-project (npm)
- Aug 14, 2025
Malicious code in star-nugget-aeu696-project (npm)
- Aug 14, 2025
Malicious code in star-nimbus-koc547-project (npm)
- Aug 14, 2025
Malicious code in star-meadow-ftp720-project (npm)
- Aug 14, 2025
Malicious code in star-jungle-wzr074-project (npm)
- Aug 14, 2025
Malicious code in star-falcon-jxi928-project (npm)
- Aug 14, 2025
Malicious code in star-execute-float-try-earth (npm)
- Aug 14, 2025
Malicious code in star-emerald-gwd610-project (npm)
- Aug 14, 2025
Malicious code in star-elephant-ikk119-project (npm)
- Aug 14, 2025
Malicious code in star-dove-bvm021-project (npm)
- Aug 14, 2025
Malicious code in star-dewdrop-zce411-project (npm)
- Aug 14, 2025
Malicious code in star-cold-sudo-encrypt-void (npm)
- Aug 14, 2025
Malicious code in star-cat-fmn497-project (npm)
- Aug 14, 2025
Malicious code in star-blossom-fex500-project (npm)
- Aug 14, 2025
Malicious code in star-awk-interface-final-psi (npm)
- Aug 14, 2025
Malicious code in star-arctic-jnt261-project (npm)
- Aug 14, 2025
Malicious code in star-abstract-epsilon-log-pipe (npm)
- Aug 14, 2025
Malicious code in star-08q34-uf2ar-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebwebwebwebwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebwebwebwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebwebwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebwebweb (npm)
- Aug 14, 2025
Malicious code in standardwebappwebweb (npm)
Page 5742 of 7,293