Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in popart (npm)
- Aug 14, 2025
Malicious code in pootis (npm)
- Aug 14, 2025
Malicious code in poolpartyjs (npm)
- Aug 14, 2025
Malicious code in pool-working2 (npm)
- Aug 14, 2025
Malicious code in pool-working (npm)
- Aug 14, 2025
Malicious code in pool-web4 (npm)
- Aug 14, 2025
Malicious code in pool-web2 (npm)
- Aug 14, 2025
Malicious code in pool-web (npm)
- Aug 14, 2025
Malicious code in pool-standard (npm)
- Aug 14, 2025
Malicious code in poodinis (npm)
- Aug 14, 2025
Malicious code in ponnuki (npm)
- Aug 14, 2025
Malicious code in ponete (npm)
- Aug 14, 2025
Malicious code in ponceur (npm)
- Aug 14, 2025
Malicious code in pommel (npm)
- Aug 14, 2025
Malicious code in pomidor (npm)
- Aug 14, 2025
Malicious code in pombawah (npm)
- Aug 14, 2025
Malicious code in polymer-redux-store (npm)
- Aug 14, 2025
Malicious code in polymarket-subgraph-common (npm)
- Aug 14, 2025
Malicious code in polyfill-browser (npm)
- Aug 14, 2025
Malicious code in polyclip (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-rgb-dmx (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-relay-pack (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-pc-power (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-hdmi-matrix (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-dimmer-dmx (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha-artnet-node (npm)
- Aug 14, 2025
Malicious code in poltergeist-ha (npm)
- Aug 14, 2025
Malicious code in polsimple (npm)
- Aug 14, 2025
Malicious code in pollapp (npm)
- Aug 14, 2025
Malicious code in polkaswap-exchange-web (npm)
- Aug 14, 2025
Malicious code in polisher (npm)
- Aug 14, 2025
Malicious code in polilogger (npm)
- Aug 14, 2025
Malicious code in policykit (npm)
- Aug 14, 2025
Malicious code in polaris_tokens_plus (npm)
- Aug 14, 2025
Malicious code in polaris_icons (npm)
- Aug 14, 2025
Malicious code in polaris-viz-native (npm)
- Aug 14, 2025
Malicious code in polaris-viz-core (npm)
- Aug 14, 2025
Malicious code in polaris-uranology-luna-leda (npm)
- Aug 14, 2025
Malicious code in polaris-solarnebula-europa-mineralogy (npm)
- Aug 14, 2025
Malicious code in polaris-private-writable-europa (npm)
- Aug 14, 2025
Malicious code in polaris-pino-pretty-void-apollo (npm)
- Aug 14, 2025
Malicious code in polaris-native-antares-hugo (npm)
- Aug 14, 2025
Malicious code in polaris-migrator (npm)
- Aug 14, 2025
Malicious code in polaris-cli (npm)
- Aug 14, 2025
Malicious code in polaris-chromedriver-mdx-pegasus (npm)
- Aug 14, 2025
Malicious code in polaris-charts (npm)
- Aug 14, 2025
Malicious code in polaris-bellatrix-octans-celeste (npm)
- Aug 14, 2025
Malicious code in polaris-apollo-quantum-neuromorphic (npm)
- Aug 14, 2025
Malicious code in pokeutils (npm)
- Aug 14, 2025
Malicious code in pokeronline (npm)
Page 5865 of 7,327