Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in matrics (npm)
- Aug 14, 2025
Malicious code in matplot (npm)
- Aug 14, 2025
Malicious code in matnara (npm)
- Aug 14, 2025
Malicious code in matinas (npm)
- Aug 14, 2025
Malicious code in matic-snaps (npm)
- Aug 14, 2025
Malicious code in matic-root-subgraphs (npm)
- Aug 14, 2025
Malicious code in mathi-test-npm (npm)
- Aug 14, 2025
Malicious code in mathi-sf-npm (npm)
- Aug 14, 2025
Malicious code in mathais (npm)
- Aug 14, 2025
Malicious code in math_example113 (npm)
- Aug 14, 2025
Malicious code in Math (npm)
- Aug 14, 2025
Malicious code in materov (npm)
- Aug 14, 2025
Malicious code in materially (npm)
- Aug 14, 2025
Malicious code in materialjs (npm)
- Aug 14, 2025
Malicious code in materialize-inflation-graviton-on (npm)
- Aug 14, 2025
Malicious code in materialize-europa-forever-dependencies (npm)
- Aug 14, 2025
Malicious code in materialize-dendrochronology-atlas-technocracy (npm)
- Aug 14, 2025
Malicious code in materialize-archaeoastronomy-io-test (npm)
- Aug 14, 2025
Malicious code in material-test (npm)
- Aug 14, 2025
Malicious code in material-blend (npm)
- Aug 14, 2025
Malicious code in matches-dom-selector (npm)
- Aug 14, 2025
Malicious code in match-master-new588 (npm)
- Aug 14, 2025
Malicious code in matayoshi (npm)
- Aug 14, 2025
Malicious code in mastime (npm)
- Aug 14, 2025
Malicious code in masthes (npm)
- Aug 14, 2025
Malicious code in mastert (npm)
- Aug 14, 2025
Malicious code in mastercard_ezaccess_for_issuers_api (npm)
- Aug 14, 2025
Malicious code in masqurade (npm)
- Aug 14, 2025
Malicious code in masood2000_project10_oop (npm)
- Aug 14, 2025
Malicious code in masomorfo (npm)
- Aug 14, 2025
Malicious code in mashupfix (npm)
- Aug 14, 2025
Malicious code in mashshare (npm)
- Aug 14, 2025
Malicious code in mashrs (npm)
- Aug 14, 2025
Malicious code in mashape-analytics (npm)
- Aug 14, 2025
Malicious code in maseratti (npm)
- Aug 14, 2025
Malicious code in maryland (npm)
- Aug 14, 2025
Malicious code in marxieu (npm)
- Aug 14, 2025
Malicious code in marwood (npm)
- Aug 14, 2025
Malicious code in marvin-nodejs-sdk (npm)
- Aug 14, 2025
Malicious code in marvi-core (npm)
- Aug 14, 2025
Malicious code in marvelmap (npm)
- Aug 14, 2025
Malicious code in marufrana (npm)
- Aug 14, 2025
Malicious code in marudor-hazelcast-client (npm)
- Aug 14, 2025
Malicious code in martillo (npm)
- Aug 14, 2025
Malicious code in martaio (npm)
- Aug 14, 2025
Malicious code in marstons (npm)
- Aug 14, 2025
Malicious code in marquez (npm)
- Aug 14, 2025
Malicious code in marooon (npm)
- Aug 14, 2025
Malicious code in marmik1a (npm)
- Aug 14, 2025
Malicious code in marmik (npm)
Page 5934 of 7,326