Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Aug 14, 2025
Malicious code in pandora-client (npm)
- Aug 14, 2025
Malicious code in pandora-book (npm)
- Aug 14, 2025
Malicious code in pandis (npm)
- Aug 14, 2025
Malicious code in pandeco (npm)
- Aug 14, 2025
Malicious code in pancake_connect (npm)
- Aug 14, 2025
Malicious code in pancake_conn (npm)
- Aug 14, 2025
Malicious code in panappl (npm)
- Aug 14, 2025
Malicious code in panader (npm)
- Aug 14, 2025
Malicious code in palynology-xenos-proteomics-magnetar (npm)
- Aug 14, 2025
Malicious code in palynology-kaus-miranda-regulus (npm)
- Aug 14, 2025
Malicious code in palynology-acamar-remark-koa (npm)
- Aug 14, 2025
Malicious code in palturaza (npm)
- Aug 14, 2025
Malicious code in paltran (npm)
- Aug 14, 2025
Malicious code in paliturka (npm)
- Aug 14, 2025
Malicious code in paleopot (npm)
- Aug 14, 2025
Malicious code in paleontology-process-rollup-speleology (npm)
- Aug 14, 2025
Malicious code in paleontology-phylogenetics-titan-castor (npm)
- Aug 14, 2025
Malicious code in paleontology-nodemon-bootes-morgan (npm)
- Aug 14, 2025
Malicious code in paleontology-mongodb-acamar-planetology (npm)
- Aug 14, 2025
Malicious code in paleontology-galaxy-sirius-galaxy (npm)
- Aug 14, 2025
Malicious code in paleomagnetism-quark-terser-webpack-plugin-grus (npm)
- Aug 14, 2025
Malicious code in paleomagnetism-postgres-aether-stop (npm)
- Aug 14, 2025
Malicious code in paleomagnetism-dactyl-registry-standard (npm)
- Aug 14, 2025
Malicious code in paleomagnetism-config-eslint-terraforming (npm)
- Aug 14, 2025
Malicious code in paleomagnetism-bootstrap-release-it-ichnology (npm)
- Aug 14, 2025
Malicious code in paleoecology-sirius-concurrently-phenomic (npm)
- Aug 14, 2025
Malicious code in paleoecology-saturnology-query-kinetic (npm)
- Aug 14, 2025
Malicious code in paleoecology-neptune-node-sass-ultra (npm)
- Aug 14, 2025
Malicious code in paleoecology-comet-postgres-blazar (npm)
- Aug 14, 2025
Malicious code in paleoecology-carpo-relay-hexo (npm)
- Aug 14, 2025
Malicious code in paleoclimatology-quark-jasmine-hologram (npm)
- Aug 14, 2025
Malicious code in paleoclimatology-pegasus-nanotechnology-archaeoastronomy (npm)
- Aug 14, 2025
Malicious code in paleoclimatology-lightyear-leda-nova (npm)
- Aug 14, 2025
Malicious code in paleoclimatology-interstellarmedium-xml-astroinformatics (npm)
- Aug 14, 2025
Malicious code in paleoceanography-stop-graviton-ursa (npm)
- Aug 14, 2025
Malicious code in paleobotany-winston-interstellarmedium-semantic-ui (npm)
- Aug 14, 2025
Malicious code in paleobotany-planetology-schema-xo (npm)
- Aug 14, 2025
Malicious code in paleobotany-cz-conventional-changelog-jovian-quantum (npm)
- Aug 14, 2025
Malicious code in paleoanthropology-terraforming-cluster-mineralogy (npm)
- Aug 14, 2025
Malicious code in paleoanthropology-selenium-centaurus-fusion (npm)
- Aug 14, 2025
Malicious code in paleoanthropology-hydrogeology-zenobia-pino-pretty (npm)
- Aug 14, 2025
Malicious code in paleoanthropology-blueshift-exosphere-void (npm)
- Aug 14, 2025
Malicious code in paleoanthropology-astrobiology-rollup-karma (npm)
- Aug 14, 2025
Malicious code in palante (npm)
- Aug 14, 2025
Malicious code in palacio (npm)
- Aug 14, 2025
Malicious code in pakki-service (npm)
- Aug 14, 2025
Malicious code in pakjniuw (npm)
- Aug 14, 2025
Malicious code in paintfill (npm)
- Aug 14, 2025
Malicious code in painta (npm)
- Aug 14, 2025
Malicious code in pagini (npm)
Page 5881 of 7,327