Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in pu-commerce-connect (npm)
- Aug 14, 2025
Malicious code in pttrnflow (npm)
- Aug 14, 2025
Malicious code in ptswkrvzhlmnqojy (npm)
- Aug 14, 2025
Malicious code in ptswithgc (npm)
- Aug 14, 2025
Malicious code in ptstobvh (npm)
- Aug 14, 2025
Malicious code in ptsboof (npm)
- Aug 14, 2025
Malicious code in ptocalc (npm)
- Aug 14, 2025
Malicious code in ptjksqbonlhdcviz (npm)
- Aug 14, 2025
Malicious code in pt-serif (npm)
- Aug 14, 2025
Malicious code in pt-mono (npm)
- Aug 14, 2025
Malicious code in psygen (npm)
- Aug 14, 2025
Malicious code in psttest (npm)
- Aug 14, 2025
Malicious code in pslogging (npm)
- Aug 14, 2025
Malicious code in pseuwow (npm)
- Aug 14, 2025
Malicious code in psamanta (npm)
- Aug 14, 2025
Malicious code in psa-generator (npm)
- Aug 14, 2025
Malicious code in prymeui (npm)
- Aug 14, 2025
Malicious code in pruksa (npm)
- Aug 14, 2025
Malicious code in pruebay (npm)
- Aug 14, 2025
Malicious code in pru-forms (npm)
- Aug 14, 2025
Malicious code in pru-colours (npm)
- Aug 14, 2025
Malicious code in prpo-types (npm)
- Aug 14, 2025
Malicious code in proxy-prototype (npm)
- Aug 14, 2025
Malicious code in proxy-compile-private-tau-grep (npm)
- Aug 14, 2025
Malicious code in proxima-eridanus-xml-jsonp (npm)
- Aug 14, 2025
Malicious code in proxima-commitlint-commitizen-aurora (npm)
- Aug 14, 2025
Malicious code in proxima-callisto-prettier-stylelint-titan (npm)
- Aug 14, 2025
Malicious code in proxible (npm)
- Aug 14, 2025
Malicious code in provis-locks (npm)
- Aug 14, 2025
Malicious code in provider-configurations (npm)
- Aug 14, 2025
Malicious code in protractor-html-screenshot-report (npm)
- Aug 14, 2025
Malicious code in protorina (npm)
- Aug 14, 2025
Malicious code in protorec (npm)
- Aug 14, 2025
Malicious code in protoplanetarydisk-rehype-vortex-koa (npm)
- Aug 14, 2025
Malicious code in protoplanetarydisk-quasarjet-radioastronomy-node-config (npm)
- Aug 14, 2025
Malicious code in protoplanetarydisk-plutology-lynx-kardashevscale (npm)
- Aug 14, 2025
Malicious code in protoplanetarydisk-decoherence-aquarius-parcel (npm)
- Aug 14, 2025
Malicious code in protoplanetarydisk-archaeometry-procyon-node-config (npm)
- Aug 14, 2025
Malicious code in protomon (npm)
- Aug 14, 2025
Malicious code in protogit (npm)
- Aug 14, 2025
Malicious code in proto-ui-shell-test (npm)
- Aug 14, 2025
Malicious code in proto-ui-shell (npm)
- Aug 14, 2025
Malicious code in proto-offering-module (npm)
- Aug 14, 2025
Malicious code in proteusdns (npm)
- Aug 14, 2025
Malicious code in proteomics-vulcan-venus-buffer (npm)
- Aug 14, 2025
Malicious code in proteomics-spectron-chromedriver-package (npm)
- Aug 14, 2025
Malicious code in proteomics-spawn-upgrade-parallax (npm)
- Aug 14, 2025
Malicious code in proteomics-perturbation-weywot-areology (npm)
- Aug 14, 2025
Malicious code in proteomics-parallax-parallax-wasat (npm)
- Aug 14, 2025
Malicious code in proteomics-link-promise-callisto (npm)
Page 5805 of 7,293