Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in pcaface (npm)
- Aug 14, 2025
Malicious code in pbfdump (npm)
- Aug 14, 2025
Malicious code in pbcfsite (npm)
- Aug 14, 2025
Malicious code in pbase_eru (npm)
- Aug 14, 2025
Malicious code in payulib (npm)
- Aug 14, 2025
Malicious code in paytime (npm)
- Aug 14, 2025
Malicious code in paytabs-nodejs (npm)
- Aug 14, 2025
Malicious code in paysera-logger (npm)
- Aug 14, 2025
Malicious code in paysafecard-refund (npm)
- Aug 14, 2025
Malicious code in paypalize (npm)
- Aug 14, 2025
Malicious code in paypal-scripts (npm)
- Aug 14, 2025
Malicious code in paypal-scrips (npm)
- Aug 14, 2025
Malicious code in paypal-retail-node (npm)
- Aug 14, 2025
Malicious code in paypal-codes-generator897 (npm)
- Aug 14, 2025
Malicious code in paypal-codes-generator658 (npm)
- Aug 14, 2025
Malicious code in paypal-codes-generator500 (npm)
- Aug 14, 2025
Malicious code in paypal-codes-generator371 (npm)
- Aug 14, 2025
Malicious code in paypal-codes-generator071 (npm)
- Aug 14, 2025
Malicious code in payments-quickstart (npm)
- Aug 14, 2025
Malicious code in payment_service_client (npm)
- Aug 14, 2025
Malicious code in payment-methods-component (npm)
- Aug 14, 2025
Malicious code in paymaya-payment-js-sdk (npm)
- Aug 14, 2025
Malicious code in paycryptor (npm)
- Aug 14, 2025
Malicious code in paychex_app_company_legacy_dtos (npm)
- Aug 14, 2025
Malicious code in paychex-tracking (npm)
- Aug 14, 2025
Malicious code in paychex-grunt-configs (npm)
- Aug 14, 2025
Malicious code in paychex-framework-forms (npm)
- Aug 14, 2025
Malicious code in paychex-framework-core-ui (npm)
- Aug 14, 2025
Malicious code in paychex-framework-approvals (npm)
- Aug 14, 2025
Malicious code in paychex-framework (npm)
- Aug 14, 2025
Malicious code in paychex-common-npm (npm)
- Aug 14, 2025
Malicious code in paychex-app-common-html (npm)
- Aug 14, 2025
Malicious code in paybill-ui (npm)
- Aug 14, 2025
Malicious code in pay-flexible-kit (npm)
- Aug 14, 2025
Malicious code in pavo-sqlite-process-pyxis (npm)
- Aug 14, 2025
Malicious code in pavo-npm-carina-antd (npm)
- Aug 14, 2025
Malicious code in pavo-init-sass-loader-nodejs (npm)
- Aug 14, 2025
Malicious code in pavo-cybernetics-subduction-capella (npm)
- Aug 14, 2025
Malicious code in pavo-algol-lynx-enceladus (npm)
- Aug 14, 2025
Malicious code in paviev (npm)
- Aug 14, 2025
Malicious code in pause-function (npm)
- Aug 14, 2025
Malicious code in paulville (npm)
- Aug 14, 2025
Malicious code in pattrec (npm)
- Aug 14, 2025
Malicious code in patternReplacer (npm)
- Aug 14, 2025
Malicious code in patterngo (npm)
- Aug 14, 2025
Malicious code in pattern-watcher (npm)
- Aug 14, 2025
Malicious code in pattern-recognizer (npm)
- Aug 14, 2025
Malicious code in patria-tempe48-kuki (npm)
- Aug 14, 2025
Malicious code in patria-saguer9-breki (npm)
- Aug 14, 2025
Malicious code in patria-rangi21-sukiwir (npm)
Page 5876 of 7,327