Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in pokemon-module (npm)
- Aug 14, 2025
Malicious code in pokazania (npm)
- Aug 14, 2025
Malicious code in poitiers (npm)
- Aug 14, 2025
Malicious code in pogolib (npm)
- Aug 14, 2025
Malicious code in pogobot (npm)
- Aug 14, 2025
Malicious code in pogo-build (npm)
- Aug 14, 2025
Malicious code in poenar-template (npm)
- Aug 14, 2025
Malicious code in poemator (npm)
- Aug 14, 2025
Malicious code in poehali (npm)
- Aug 14, 2025
Malicious code in poduspack (npm)
- Aug 14, 2025
Malicious code in podlet-morelikethis (npm)
- Aug 14, 2025
Malicious code in podfmdog (npm)
- Aug 14, 2025
Malicious code in podela (npm)
- Aug 14, 2025
Malicious code in pocketpy (npm)
- Aug 14, 2025
Malicious code in pnpm-utils (npm)
- Aug 14, 2025
Malicious code in pnbwuemwubna (npm)
- Aug 14, 2025
Malicious code in pmobile (npm)
- Aug 14, 2025
Malicious code in pml-edi-parser (npm)
- Aug 14, 2025
Malicious code in pmircuser (npm)
- Aug 14, 2025
Malicious code in pmg (npm)
- Aug 14, 2025
Malicious code in pmdapp (npm)
- Aug 14, 2025
Malicious code in pmagviz (npm)
- Aug 14, 2025
Malicious code in pm2-harmony-client (npm)
- Aug 14, 2025
Malicious code in pm10-kickstart.css (npm)
- Aug 14, 2025
Malicious code in plymouth (npm)
- Aug 14, 2025
Malicious code in plutov-slack-client (npm)
- Aug 14, 2025
Malicious code in plutology-singularitarianism-testcafe-ophiuchus (npm)
- Aug 14, 2025
Malicious code in plutology-quantum-computing-link-foundation (npm)
- Aug 14, 2025
Malicious code in plutology-paleoanthropology-elektra-polaris (npm)
- Aug 14, 2025
Malicious code in plus_platform_client (npm)
- Aug 14, 2025
Malicious code in plurkii (npm)
- Aug 14, 2025
Malicious code in plurka (npm)
- Aug 14, 2025
Malicious code in plume_v9wvs_dl0en_harmony (npm)
- Aug 14, 2025
Malicious code in plume_u205n_fpk9e_firefly (npm)
- Aug 14, 2025
Malicious code in plume_o86ab_tk7go_pinnacle (npm)
- Aug 14, 2025
Malicious code in plume_l95ti_3tjug_serenade (npm)
- Aug 14, 2025
Malicious code in plume_de4ts_xottu_keystone (npm)
- Aug 14, 2025
Malicious code in plume_bb3vt_6syx9_yosemite (npm)
- Aug 14, 2025
Malicious code in plume_86htk_5gvx1_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in plume_6z6ku_qtkjk_crown (npm)
- Aug 14, 2025
Malicious code in plume_5yjcu_gph4j_honey (npm)
- Aug 14, 2025
Malicious code in plume-xni8d-loizg-frost-project (npm)
- Aug 14, 2025
Malicious code in plume-xgda6-fx7v6-zephyr-project (npm)
- Aug 14, 2025
Malicious code in plume-gtzdx-r83fl-nectar-project (npm)
- Aug 14, 2025
Malicious code in plume-bqoeq-2mk5q-quartz-project (npm)
- Aug 14, 2025
Malicious code in plume-6vhn6-tz57c-thunder-project (npm)
- Aug 14, 2025
Malicious code in plume-3zt7p-enicb-jade-project (npm)
- Aug 14, 2025
Malicious code in plugin-sass (npm)
- Aug 14, 2025
Malicious code in plugin-polaris (npm)
- Aug 14, 2025
Malicious code in plugin-ngrok (npm)
Page 5866 of 7,327