Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Aug 14, 2025
Malicious code in mui-jupiter-mdx-supercluster (npm)
- Aug 14, 2025
Malicious code in mufyjxqdkpegstbc (npm)
- Aug 14, 2025
Malicious code in muffincms (npm)
- Aug 14, 2025
Malicious code in muebleria (npm)
- Aug 14, 2025
Malicious code in mudsmith (npm)
- Aug 14, 2025
Malicious code in muckrake (npm)
- Aug 14, 2025
Malicious code in muchwords (npm)
- Aug 14, 2025
Malicious code in muchos (npm)
- Aug 14, 2025
Malicious code in mubiz-ws-client (npm)
- Aug 14, 2025
Malicious code in mubiz-ws-cli (npm)
- Aug 14, 2025
Malicious code in mtvr3 (npm)
- Aug 14, 2025
Malicious code in mtlogger (npm)
- Aug 14, 2025
Malicious code in mtkhnyjadolbewsr (npm)
- Aug 14, 2025
Malicious code in mtgforge (npm)
- Aug 14, 2025
Malicious code in mtfe_fe.core (npm)
- Aug 14, 2025
Malicious code in mtfe_cos_deploy (npm)
- Aug 14, 2025
Malicious code in mtfe_cos_config (npm)
- Aug 14, 2025
Malicious code in mtfe_cos-ui (npm)
- Aug 14, 2025
Malicious code in mtfe_cos-core (npm)
- Aug 14, 2025
Malicious code in mteeor (npm)
- Aug 14, 2025
Malicious code in mtdtool (npm)
- Aug 14, 2025
Malicious code in mtapoja (npm)
- Aug 14, 2025
Malicious code in mtagger (npm)
- Aug 14, 2025
Malicious code in mstr-react-library (npm)
- Aug 14, 2025
Malicious code in msphysics (npm)
- Aug 14, 2025
Malicious code in msopen (npm)
- Aug 14, 2025
Malicious code in mshowx (npm)
- Aug 14, 2025
Malicious code in mshood (npm)
- Aug 14, 2025
Malicious code in mshogi (npm)
- Aug 14, 2025
Malicious code in msg-calendar (npm)
- Aug 14, 2025
Malicious code in msc-target (npm)
- Aug 14, 2025
Malicious code in msc-site (npm)
- Aug 14, 2025
Malicious code in msc-cloud (npm)
- Aug 14, 2025
Malicious code in ms-validationservice (npm)
- Aug 14, 2025
Malicious code in ms-quoteservice (npm)
- Aug 14, 2025
Malicious code in ms-projectionservice (npm)
- Aug 14, 2025
Malicious code in ms-policyservice (npm)
- Aug 14, 2025
Malicious code in ms-faber-logicservice (npm)
- Aug 14, 2025
Malicious code in ms-azuretools.vscode-azureresourcegroups (npm)
- Aug 14, 2025
Malicious code in mruby_engine (npm)
- Aug 14, 2025
Malicious code in mrmath (npm)
- Aug 14, 2025
Malicious code in mrlockers (npm)
- Aug 14, 2025
Malicious code in mrlistr (npm)
- Aug 14, 2025
Malicious code in mrhpjvkgzoywalcx (npm)
- Aug 14, 2025
Malicious code in mrfisher (npm)
- Aug 14, 2025
Malicious code in mqtt_plugin (npm)
- Aug 14, 2025
Malicious code in mpublic (npm)
- Aug 14, 2025
Malicious code in mpochowskiserv (npm)
- Aug 14, 2025
Malicious code in mplayer-binary-win32 (npm)
- Aug 14, 2025
Malicious code in mphoto (npm)
Page 5917 of 7,326