Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in planetology-indus-webdriver-mocha-astro (npm)
- Aug 14, 2025
Malicious code in planetology-element-ui-pulsar-rigel (npm)
- Aug 14, 2025
Malicious code in planckscale-xenon-arcturus-flare (npm)
- Aug 14, 2025
Malicious code in planckscale-mira-configstore-cli (npm)
- Aug 14, 2025
Malicious code in planckscale-bellatrix-neuromorphic-astrometry (npm)
- Aug 14, 2025
Malicious code in planckscale-astrochemistry-paleoceanography-dorado (npm)
- Aug 14, 2025
Malicious code in planckscale-antares-despina-void (npm)
- Aug 14, 2025
Malicious code in placeholderx (npm)
- Aug 14, 2025
Malicious code in placeholder1 (npm)
- Aug 14, 2025
Malicious code in placeHolder.js (npm)
- Aug 14, 2025
Malicious code in pkkenvlobqryhism (npm)
- Aug 14, 2025
Malicious code in pkg-sutex (npm)
- Aug 14, 2025
Malicious code in pkg-dependents-cli (npm)
- Aug 14, 2025
Malicious code in pjwstk (npm)
- Aug 14, 2025
Malicious code in pjcore (npm)
- Aug 14, 2025
Malicious code in pizzanet (npm)
- Aug 14, 2025
Malicious code in pizza-pasta (npm)
- Aug 14, 2025
Malicious code in pizza-party (npm)
- Aug 14, 2025
Malicious code in piy (npm)
- Aug 14, 2025
Malicious code in pixzen (npm)
- Aug 14, 2025
Malicious code in pixxel (npm)
- Aug 14, 2025
Malicious code in pixvanastudio (npm)
- Aug 14, 2025
Malicious code in pixograms (npm)
- Aug 14, 2025
Malicious code in pixelrpg (npm)
- Aug 14, 2025
Malicious code in pixelpipe (npm)
- Aug 14, 2025
Malicious code in pixellang (npm)
- Aug 14, 2025
Malicious code in pixelfy (npm)
- Aug 14, 2025
Malicious code in pixelchat (npm)
- Aug 14, 2025
Malicious code in piweekly (npm)
- Aug 14, 2025
Malicious code in pivotout (npm)
- Aug 14, 2025
Malicious code in pitoff (npm)
- Aug 14, 2025
Malicious code in pitercomp (npm)
- Aug 14, 2025
Malicious code in pitchruby (npm)
- Aug 14, 2025
Malicious code in pisubrov (npm)
- Aug 14, 2025
Malicious code in pisting-yawa (npm)
- Aug 14, 2025
Malicious code in pisti (npm)
- Aug 14, 2025
Malicious code in pisomky (npm)
- Aug 14, 2025
Malicious code in piscinec (npm)
- Aug 14, 2025
Malicious code in pirtition (npm)
- Aug 14, 2025
Malicious code in pircar (npm)
- Aug 14, 2025
Malicious code in pirahna (npm)
- Aug 14, 2025
Malicious code in piptesta (npm)
- Aug 14, 2025
Malicious code in pipelined (npm)
- Aug 14, 2025
Malicious code in pipedit (npm)
- Aug 14, 2025
Malicious code in pipe-html-webpack-plugin-quasar-yildun (npm)
- Aug 14, 2025
Malicious code in pipe-hash-minify-thread-char (npm)
- Aug 14, 2025
Malicious code in pipe-gammarayburst-slides-sirius (npm)
- Aug 14, 2025
Malicious code in pipe-float-mu-spy-table (npm)
- Aug 14, 2025
Malicious code in pipe-dendrochronology-auth-proxima (npm)
- Aug 14, 2025
Malicious code in pipe-css-loader-unuk-ursa (npm)
Page 5868 of 7,327