Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in photo-compare-sort (npm)
- Aug 14, 2025
Malicious code in phoneverify (npm)
- Aug 14, 2025
Malicious code in phonesite (npm)
- Aug 14, 2025
Malicious code in phonenews (npm)
- Aug 14, 2025
Malicious code in phonegsm (npm)
- Aug 14, 2025
Malicious code in phonecard (npm)
- Aug 14, 2025
Malicious code in phone-scrape-dll (npm)
- Aug 14, 2025
Malicious code in phoenix_zxyd4_7lgow_legend (npm)
- Aug 14, 2025
Malicious code in phoenix_x7hbk_zkvio_voyage (npm)
- Aug 14, 2025
Malicious code in phoenix_t7k18_aenn0_bluebird (npm)
- Aug 14, 2025
Malicious code in phoenix_ioqox_ifetj_mystic (npm)
- Aug 14, 2025
Malicious code in phoenix_imqa8_tw9mx_zodiac (npm)
- Aug 14, 2025
Malicious code in phoenix_bvn17_ewsrj_xenon (npm)
- Aug 14, 2025
Malicious code in phoenix_5xdaz_t7yg7_willow (npm)
- Aug 14, 2025
Malicious code in phoenix_12qwt_11wmc_alchemy (npm)
- Aug 14, 2025
Malicious code in phoenix-xanadu-convict-nightmare (npm)
- Aug 14, 2025
Malicious code in phoenix-ogypz-nppof-nebula-project (npm)
- Aug 14, 2025
Malicious code in phoenix-fermion-markdownlint-holography (npm)
- Aug 14, 2025
Malicious code in phoebe-vega-commitlint-config-angular-lint (npm)
- Aug 14, 2025
Malicious code in phoebe-telesto-luna-farout (npm)
- Aug 14, 2025
Malicious code in phoebe-slidev-pegasus-auriga (npm)
- Aug 14, 2025
Malicious code in phoebe-relay-jwt-pino (npm)
- Aug 14, 2025
Malicious code in phoebe-postcss-style-loader-geomorphology (npm)
- Aug 14, 2025
Malicious code in phoebe-levels-xenon-darkenergy (npm)
- Aug 14, 2025
Malicious code in phoebe-izar-oberon-mongodb (npm)
- Aug 14, 2025
Malicious code in phoebe-grus-semantic-ui-algol (npm)
- Aug 14, 2025
Malicious code in phoebe-eridanus-auriga-library (npm)
- Aug 14, 2025
Malicious code in phoebe-dotenv-safe-markdown-init (npm)
- Aug 14, 2025
Malicious code in phoebe-cryptography-betelgeuse-gacrux (npm)
- Aug 14, 2025
Malicious code in phoebe-cli-rigel-io (npm)
- Aug 14, 2025
Malicious code in phoebe-callback-cressida-resolvers (npm)
- Aug 14, 2025
Malicious code in phobia (npm)
- Aug 14, 2025
Malicious code in phixius-nacha-csp-service-api (npm)
- Aug 14, 2025
Malicious code in philistia (npm)
- Aug 14, 2025
Malicious code in philips-ui (npm)
- Aug 14, 2025
Malicious code in philcv (npm)
- Aug 14, 2025
Malicious code in phi3-webgpu (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in phi-orchestrate-cron-hash-function (npm)
- Aug 14, 2025
Malicious code in phi-catch-omega-deserialize-cloud (npm)
- Aug 14, 2025
Malicious code in phenomic-spica-augmentedreality-eslint-plugin (npm)
- Aug 14, 2025
Malicious code in phenomic-non-blocking-hyperion-ichnology (npm)
- Aug 14, 2025
Malicious code in phenomic-library-electron-builder-kaus (npm)
- Aug 14, 2025
Malicious code in phenomic-javascript-carpo-dagda (npm)
- Aug 14, 2025
Malicious code in phenomic-interstellarmedium-hadron-gatsby (npm)
- Aug 14, 2025
Malicious code in phenomic-bellatrix-prompts-node-config (npm)
- Aug 14, 2025
Malicious code in phenomic-andromeda-miranda-io (npm)
- Aug 14, 2025
Malicious code in phatality (npm)
- Aug 14, 2025
Malicious code in pharout (npm)
- Aug 14, 2025
Malicious code in pharmaco (npm)
- Aug 14, 2025
Malicious code in phantomjs-crawler-demo (npm)
Page 5872 of 7,327