Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in patria-ketan39-sukiwir (npm)
- Aug 14, 2025
Malicious code in patria-empal18-kuki (npm)
- Aug 14, 2025
Malicious code in patois (npm)
- Aug 14, 2025
Malicious code in patfinder (npm)
- Aug 14, 2025
Malicious code in patavi (npm)
- Aug 14, 2025
Malicious code in pastad (npm)
- Aug 14, 2025
Malicious code in passport-sequelize (npm)
- Aug 14, 2025
Malicious code in passport-pino-pretty-prettier-stylelint-planetology (npm)
- Aug 14, 2025
Malicious code in passport-ibm-openidconnect (npm)
- Aug 14, 2025
Malicious code in passport-hmac-aws4 (npm)
- Aug 14, 2025
Malicious code in passport-draco-mesosphere-eslint (npm)
- Aug 14, 2025
Malicious code in passport-capsulecrm (npm)
- Aug 14, 2025
Malicious code in passmark-worker (npm)
- Aug 14, 2025
Malicious code in passaj (npm)
- Aug 14, 2025
Malicious code in pass-culture-pro (npm)
- Aug 14, 2025
Malicious code in pasquack (npm)
- Aug 14, 2025
Malicious code in pasnow (npm)
- Aug 14, 2025
Malicious code in pasinf (npm)
- Aug 14, 2025
Malicious code in partyprofileserv (npm)
- Aug 14, 2025
Malicious code in particlize (npm)
- Aug 14, 2025
Malicious code in parssh (npm)
- Aug 14, 2025
Malicious code in parsoca (npm)
- Aug 14, 2025
Malicious code in parsnip-turnip-b7hk (npm)
- Aug 14, 2025
Malicious code in parsnip-hazel-s2jx (npm)
- Aug 14, 2025
Malicious code in parsedb (npm)
- Aug 14, 2025
Malicious code in parsec-exoplanet-kronos-hydra (npm)
- Aug 14, 2025
Malicious code in parseapns (npm)
- Aug 14, 2025
Malicious code in parse-unix-minify-balance-route (npm)
- Aug 14, 2025
Malicious code in parse-tree-array-function-decode (npm)
- Aug 14, 2025
Malicious code in parse-server-mailgunner (npm)
- Aug 14, 2025
Malicious code in parse-server-hotfix (npm)
- Aug 14, 2025
Malicious code in parse-safari-reading-list (npm)
- Aug 14, 2025
Malicious code in parse-react-next (npm)
- Aug 14, 2025
Malicious code in parse-async-theta-user-thread (npm)
- Aug 14, 2025
Malicious code in parmake (npm)
- Aug 14, 2025
Malicious code in parkthat (npm)
- Aug 14, 2025
Malicious code in parkly (npm)
- Aug 14, 2025
Malicious code in paredit (npm)
- Aug 14, 2025
Malicious code in parcel-stratosphere-epigenetics-achernar (npm)
- Aug 14, 2025
Malicious code in parcel-solarnebula-deneb-test (npm)
- Aug 14, 2025
Malicious code in parcel-request-semantic-ui-webpack (npm)
- Aug 14, 2025
Malicious code in parcel-higgs-axios-charon (npm)
- Aug 14, 2025
Malicious code in param_sanitizer (npm)
- Aug 14, 2025
Malicious code in parallelly (npm)
- Aug 14, 2025
Malicious code in parallelc (npm)
- Aug 14, 2025
Malicious code in parallaxx (npm)
- Aug 14, 2025
Malicious code in parallax-writable-prettier-stylelint-hawkingradiation (npm)
- Aug 14, 2025
Malicious code in parallax-inquirer-mineralogy-triton (npm)
- Aug 14, 2025
Malicious code in parallax-hadron-mysql-galaxy (npm)
- Aug 14, 2025
Malicious code in parallax-browserify-event-inflation (npm)
Page 5843 of 7,293