Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in meta-compile-shell-quick-resolve (npm)
- Aug 14, 2025
Malicious code in meta-bad-protected-orchestrate-serialize (npm)
- Aug 14, 2025
Malicious code in meta-analyze-cold-code-old (npm)
- Aug 14, 2025
Malicious code in messengr (npm)
- Aug 14, 2025
Malicious code in messages-outbound (npm)
- Aug 14, 2025
Malicious code in messagebot-core (npm)
- Aug 14, 2025
Malicious code in mesosphere-protoplanetarydisk-redis-colors (npm)
- Aug 14, 2025
Malicious code in mesosphere-proteomics-phoebe-kastra (npm)
- Aug 14, 2025
Malicious code in mesosphere-eslint-module-auth (npm)
- Aug 14, 2025
Malicious code in mesh-layers (npm)
- Aug 14, 2025
Malicious code in mesfer (npm)
- Aug 14, 2025
Malicious code in meryem (npm)
- Aug 14, 2025
Malicious code in mericsson-gatsby-source-contentful (npm)
- Aug 14, 2025
Malicious code in mergequeue-eval-mergequeue (npm)
- Aug 14, 2025
Malicious code in merchantprofiledataserv (npm)
- Aug 14, 2025
Malicious code in merchant_feedback-client (npm)
- Aug 14, 2025
Malicious code in merchant-newsletter-widget (npm)
- Aug 14, 2025
Malicious code in mercahnt (npm)
- Aug 14, 2025
Malicious code in meowhut (npm)
- Aug 14, 2025
Malicious code in meoion (npm)
- Aug 14, 2025
Malicious code in menus-indexer-trigger (npm)
- Aug 14, 2025
Malicious code in menupanda (npm)
- Aug 14, 2025
Malicious code in menupages (npm)
- Aug 14, 2025
Malicious code in mentors-sdk-js (npm)
- Aug 14, 2025
Malicious code in mensa-supervisor-coronalmassejection-semantic-ui (npm)
- Aug 14, 2025
Malicious code in mensa-local-mensa-protractor (npm)
- Aug 14, 2025
Malicious code in mensa-geochemistry-wavefunction-chakra-ui (npm)
- Aug 14, 2025
Malicious code in mensa-event-local-superagent (npm)
- Aug 14, 2025
Malicious code in mene-base (npm)
- Aug 14, 2025
Malicious code in mendiff (npm)
- Aug 14, 2025
Malicious code in mendelod (npm)
- Aug 14, 2025
Malicious code in menadi (npm)
- Aug 14, 2025
Malicious code in memoripy (npm)
- Aug 14, 2025
Malicious code in memophoto (npm)
- Aug 14, 2025
Malicious code in memoos (npm)
- Aug 14, 2025
Malicious code in memola (npm)
- Aug 14, 2025
Malicious code in memoize-with-leveldb (npm)
- Aug 14, 2025
Malicious code in memoize-sync (npm)
- Aug 14, 2025
Malicious code in memecodes (npm)
- Aug 14, 2025
Malicious code in memdiff (npm)
- Aug 14, 2025
Malicious code in memcached_store (npm)
- Aug 14, 2025
Malicious code in membrane-development-link-jabbah (npm)
- Aug 14, 2025
Malicious code in membrane-commitlint-config-angular-async-octans (npm)
- Aug 14, 2025
Malicious code in membrane-astrophysics-fomalhaut-framework (npm)
- Aug 14, 2025
Malicious code in meltrams (npm)
- Aug 14, 2025
Malicious code in mellvin (npm)
- Aug 14, 2025
Malicious code in melkikh-verdaccio-dc (npm)
- Aug 14, 2025
Malicious code in melkikh-test-dc (npm)
- Aug 14, 2025
Malicious code in melkikh-dependency-confusion-test (npm)
- Aug 14, 2025
Malicious code in melhor (npm)
Page 5930 of 7,326