Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Aug 14, 2025
Malicious code in muu5 (npm)
- Aug 14, 2025
Malicious code in mutiapp-hybrid-bridge (npm)
- Aug 14, 2025
Malicious code in mutation-xml-hologram-andromeda (npm)
- Aug 14, 2025
Malicious code in mutation-uninstall-node-config-version (npm)
- Aug 14, 2025
Malicious code in mutation-terser-webpack-plugin-metabolomics-mensa (npm)
- Aug 14, 2025
Malicious code in mutation-child-process-repository-xerxes (npm)
- Aug 14, 2025
Malicious code in musiqtalk (npm)
- Aug 14, 2025
Malicious code in musicyao (npm)
- Aug 14, 2025
Malicious code in musictop (npm)
- Aug 14, 2025
Malicious code in musicmvc (npm)
- Aug 14, 2025
Malicious code in musicdown (npm)
- Aug 14, 2025
Malicious code in musiarc (npm)
- Aug 14, 2025
Malicious code in mushroom-umbrella-q3ni (npm)
- Aug 14, 2025
Malicious code in mushroom-redshift-6ro0 (npm)
- Aug 14, 2025
Malicious code in mushroom-radish-fv02 (npm)
- Aug 14, 2025
Malicious code in mushroom-nebula-yu47 (npm)
- Aug 14, 2025
Malicious code in mushroom-bridge-v60l (npm)
- Aug 14, 2025
Malicious code in mushroom-apple-fxws (npm)
- Aug 14, 2025
Malicious code in muse-flourish-lud418-project (npm)
- Aug 14, 2025
Malicious code in musdev (npm)
- Aug 14, 2025
Malicious code in murderbox (npm)
- Aug 14, 2025
Malicious code in munchini (npm)
- Aug 14, 2025
Malicious code in mulyono-tongseng91-sukiwir (npm)
- Aug 14, 2025
Malicious code in mulyono-telurtahu23-kuki (npm)
- Aug 14, 2025
Malicious code in mulyono-sambel46-breki (npm)
- Aug 14, 2025
Malicious code in mulyono-rangginang7-breki (npm)
- Aug 14, 2025
Malicious code in mulyono-pecel33-kuki (npm)
- Aug 14, 2025
Malicious code in mulyono-oncom71-breki (npm)
- Aug 14, 2025
Malicious code in mulyono-buburayam15-breki (npm)
- Aug 14, 2025
Malicious code in multiverse-xo-hadron-neptune (npm)
- Aug 14, 2025
Malicious code in multiverse-backend-paleobotany-cygnus (npm)
- Aug 14, 2025
Malicious code in multisite (npm)
- Aug 14, 2025
Malicious code in multisender-smart-contract (npm)
- Aug 14, 2025
Malicious code in multirow_counter (npm)
- Aug 14, 2025
Malicious code in multidm (npm)
- Aug 14, 2025
Malicious code in multicontent-style-lib (npm)
- Aug 14, 2025
Malicious code in multicolumn-menu (npm)
- Aug 14, 2025
Malicious code in multibit (npm)
- Aug 14, 2025
Malicious code in multiary (npm)
- Aug 14, 2025
Malicious code in multi-monitor-updater (npm)
- Aug 14, 2025
Malicious code in multi-fnft (npm)
- Aug 14, 2025
Malicious code in multer-sharp-minio-storage (npm)
- Aug 14, 2025
Malicious code in mulletdb (npm)
- Aug 14, 2025
Malicious code in mulemmc (npm)
- Aug 14, 2025
Malicious code in mulavee (npm)
- Aug 14, 2025
Malicious code in mui-yildun-javascript-mongodb (npm)
- Aug 14, 2025
Malicious code in mui-transform-nightmare-xo (npm)
- Aug 14, 2025
Malicious code in mui-sagitta-comet-oauth (npm)
- Aug 14, 2025
Malicious code in mui-nextjs-isostasy-loglevel (npm)
- Aug 14, 2025
Malicious code in mui-magellan-magellan-sirius (npm)
Page 5916 of 7,326