Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in phabtools (npm)
- Aug 14, 2025
Malicious code in pgsoft (npm)
- Aug 14, 2025
Malicious code in pgqdch (npm)
- Aug 14, 2025
Malicious code in pgpsharp (npm)
- Aug 14, 2025
Malicious code in pfosheat (npm)
- Aug 14, 2025
Malicious code in pforum (npm)
- Aug 14, 2025
Malicious code in pflickr (npm)
- Aug 14, 2025
Malicious code in pfgrbkiymucvlqos (npm)
- Aug 14, 2025
Malicious code in pevtxt (npm)
- Aug 14, 2025
Malicious code in petzro (npm)
- Aug 14, 2025
Malicious code in petunia-ds (npm)
- Aug 14, 2025
Malicious code in pettycoin (npm)
- Aug 14, 2025
Malicious code in petskids (npm)
- Aug 14, 2025
Malicious code in petsapp (npm)
- Aug 14, 2025
Malicious code in petrosyan (npm)
- Aug 14, 2025
Malicious code in petrology-server-paleoclimatology-nanotechnology (npm)
- Aug 14, 2025
Malicious code in petrology-quark-janus-wasat (npm)
- Aug 14, 2025
Malicious code in petrology-mesosphere-antimatter-futurology (npm)
- Aug 14, 2025
Malicious code in petrology-kuiperbelt-antimatter-chakra-ui (npm)
- Aug 14, 2025
Malicious code in petrology-cressida-procyon-primatology (npm)
- Aug 14, 2025
Malicious code in petrinetz (npm)
- Aug 14, 2025
Malicious code in petplugin (npm)
- Aug 14, 2025
Malicious code in petgio-frontend (npm)
- Aug 14, 2025
Malicious code in petgio-backend (npm)
- Aug 14, 2025
Malicious code in petesake (npm)
- Aug 14, 2025
Malicious code in petcall (npm)
- Aug 14, 2025
Malicious code in petameta (npm)
- Aug 14, 2025
Malicious code in petal-flicker-gco816-project (npm)
- Aug 14, 2025
Malicious code in petal-dashboard-ui (npm)
- Aug 14, 2025
Malicious code in perturbation-mui-repository-apollo (npm)
- Aug 14, 2025
Malicious code in perturbation-decoherence-enif-cors (npm)
- Aug 14, 2025
Malicious code in perturbation-altair-sedna-eridanus (npm)
- Aug 14, 2025
Malicious code in perthfp (npm)
- Aug 14, 2025
Malicious code in personal-api (npm)
- Aug 14, 2025
Malicious code in person-colors (npm)
- Aug 14, 2025
Malicious code in persits (npm)
- Aug 14, 2025
Malicious code in persistent-socket (npm)
- Aug 14, 2025
Malicious code in persipura (npm)
- Aug 14, 2025
Malicious code in perseus-repository-fornax-singularity (npm)
- Aug 14, 2025
Malicious code in perseus-publish-scripts-kardashevscale (npm)
- Aug 14, 2025
Malicious code in perseus-oauth-gridsome-indus (npm)
- Aug 14, 2025
Malicious code in perseus-lacerta-yonder-hyperion (npm)
- Aug 14, 2025
Malicious code in perseus-fermion-greatfilter-hermes (npm)
- Aug 14, 2025
Malicious code in perseus-configstore-prompts-xerxes (npm)
- Aug 14, 2025
Malicious code in permission-rain-promise-orchestrate-psi (npm)
- Aug 14, 2025
Malicious code in permission-parse-static-wind-hash (npm)
- Aug 14, 2025
Malicious code in permission-easy-double-cat-scale (npm)
- Aug 14, 2025
Malicious code in perlmud (npm)
- Aug 14, 2025
Malicious code in perlhacks (npm)
- Aug 14, 2025
Malicious code in performance-server (npm)
Page 5873 of 7,327