Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in profesia-cd-components (npm)
- Aug 14, 2025
Malicious code in products-api (npm)
- Aug 14, 2025
Malicious code in production_registry_client (npm)
- Aug 14, 2025
Malicious code in productbundlesserv (npm)
- Aug 14, 2025
Malicious code in product-api (npm)
- Aug 14, 2025
Malicious code in prodreg (npm)
- Aug 14, 2025
Malicious code in prodigy-salesforce-module (npm)
- Aug 14, 2025
Malicious code in procyon-singularitarianism-farout-panspermia (npm)
- Aug 14, 2025
Malicious code in procyon-perseus-vortex-paleoecology (npm)
- Aug 14, 2025
Malicious code in procyon-parcel-ursa-cosmiconfig (npm)
- Aug 14, 2025
Malicious code in procyon-neptune-eridanus-archaeometry (npm)
- Aug 14, 2025
Malicious code in procyon-lynx-areology-public (npm)
- Aug 14, 2025
Malicious code in procyon-leda-nodejs-exec (npm)
- Aug 14, 2025
Malicious code in procyon-jasmine-nodejs-darkenergy (npm)
- Aug 14, 2025
Malicious code in procyon-grunt-backend-selenium (npm)
- Aug 14, 2025
Malicious code in procyon-gemini-karma-playwright (npm)
- Aug 14, 2025
Malicious code in procyon-eslint-plugin-on-xanthus (npm)
- Aug 14, 2025
Malicious code in procyon-dagda-hawkingradiation-antd (npm)
- Aug 14, 2025
Malicious code in procyon-bellatrix-electron-builder-phoebe (npm)
- Aug 14, 2025
Malicious code in proculo (npm)
- Aug 14, 2025
Malicious code in proctor-website (npm)
- Aug 14, 2025
Malicious code in process-work-web-web (npm)
- Aug 14, 2025
Malicious code in process-work-web (npm)
- Aug 14, 2025
Malicious code in process-work (npm)
- Aug 14, 2025
Malicious code in process-standard64 (npm)
- Aug 14, 2025
Malicious code in process-standard18 (npm)
- Aug 14, 2025
Malicious code in process-standard12 (npm)
- Aug 14, 2025
Malicious code in process-standard (npm)
- Aug 14, 2025
Malicious code in process-primatology-lepton-bellatrix (npm)
- Aug 14, 2025
Malicious code in process-cpu4 (npm)
- Aug 14, 2025
Malicious code in process-cpu2 (npm)
- Aug 14, 2025
Malicious code in process-cpu-work (npm)
- Aug 14, 2025
Malicious code in process-cpu (npm)
- Aug 14, 2025
Malicious code in process-compress-nu-code-socket (npm)
- Aug 14, 2025
Malicious code in process-char-rho-analyze-bad (npm)
- Aug 14, 2025
Malicious code in process-alpha-deploy-cron-array (npm)
- Aug 14, 2025
Malicious code in procds (npm)
- Aug 14, 2025
Malicious code in probarep (npm)
- Aug 14, 2025
Malicious code in proactive-angular-sharepoint (npm)
- Aug 14, 2025
Malicious code in pro-dj-link-to-midi (npm)
- Aug 14, 2025
Malicious code in prmr-mgc-template (npm)
- Aug 14, 2025
Malicious code in prmodule_project (npm)
- Aug 14, 2025
Malicious code in prjinter (npm)
- Aug 14, 2025
Malicious code in priyectos (npm)
- Aug 14, 2025
Malicious code in priyam (npm)
- Aug 14, 2025
Malicious code in priwebs (npm)
- Aug 14, 2025
Malicious code in privlycis (npm)
- Aug 14, 2025
Malicious code in privatepkg (npm)
- Aug 14, 2025
Malicious code in private-pack-2 (npm)
- Aug 14, 2025
Malicious code in private-pack-1 (npm)
Page 5861 of 7,327