Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in marley-plugin-router (npm)
- Aug 14, 2025
Malicious code in marley-plugin-express (npm)
- Aug 14, 2025
Malicious code in marley-plugin-core (npm)
- Aug 14, 2025
Malicious code in marley-plugin (npm)
- Aug 14, 2025
Malicious code in marley-logger (npm)
- Aug 14, 2025
Malicious code in marley-cli (npm)
- Aug 14, 2025
Malicious code in marley (npm)
- Aug 14, 2025
Malicious code in markus-oberlehner-net (npm)
- Aug 14, 2025
Malicious code in markup-web-editor (npm)
- Aug 14, 2025
Malicious code in markpond (npm)
- Aug 14, 2025
Malicious code in markplewis-eyeglass-module (npm)
- Aug 14, 2025
Malicious code in marklogic-af-test-20220718 (npm)
- Aug 14, 2025
Malicious code in markjosh (npm)
- Aug 14, 2025
Malicious code in marketing_extension_schemas (npm)
- Aug 14, 2025
Malicious code in marketing_assets_theme (npm)
- Aug 14, 2025
Malicious code in marketing_assets_essentials (npm)
- Aug 14, 2025
Malicious code in marketing_assets (npm)
- Aug 14, 2025
Malicious code in markdownlint-spectroscopy-wasat-start (npm)
- Aug 14, 2025
Malicious code in markdownlint-castor-betelgeuse-miranda (npm)
- Aug 14, 2025
Malicious code in markdown-subscription-achernar-glaciology (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-sedna-markdown-pdf-module (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-package-seismology-prettier (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-ganymede-archaeometry-warp (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-fermiparadox-eigenstate-quark (npm)
- Aug 14, 2025
Malicious code in markdown-pdf-enceladus-registry-orbit (npm)
- Aug 14, 2025
Malicious code in markdown-meissa-optimize-css-assets-webpack-plugin-odin (npm)
- Aug 14, 2025
Malicious code in markdown-magnetar-neptune-ichnology (npm)
- Aug 14, 2025
Malicious code in markdown-izar-blazar-halley (npm)
- Aug 14, 2025
Malicious code in markdown-it-embed (npm)
- Aug 14, 2025
Malicious code in markdown-ethology-javascript-despina (npm)
- Aug 14, 2025
Malicious code in mariya (npm)
- Aug 14, 2025
Malicious code in marin.petrov1988-frame-print (npm)
- Aug 14, 2025
Malicious code in maribor (npm)
- Aug 14, 2025
Malicious code in margele (npm)
- Aug 14, 2025
Malicious code in maranate (npm)
- Aug 14, 2025
Malicious code in maquinita (npm)
- Aug 14, 2025
Malicious code in maptry (npm)
- Aug 14, 2025
Malicious code in mapsnap (npm)
- Aug 14, 2025
Malicious code in mapptus (npm)
- Aug 14, 2025
Malicious code in maplink-geocoder (npm)
- Aug 14, 2025
Malicious code in maple_zf3vh_qhayi_ivy (npm)
- Aug 14, 2025
Malicious code in maple_tj2ef_oh6ln_illusion (npm)
- Aug 14, 2025
Malicious code in maple_nm44l_w6j8t_keystone (npm)
- Aug 14, 2025
Malicious code in maple_lh1uo_v3mem_utopia (npm)
- Aug 14, 2025
Malicious code in maple_auxg6_g3cje_xanadu (npm)
- Aug 14, 2025
Malicious code in maple_6v6bm_cw6n0_twilight (npm)
- Aug 14, 2025
Malicious code in maple-tango-f2gk (npm)
- Aug 14, 2025
Malicious code in maple-redwood-580h (npm)
- Aug 14, 2025
Malicious code in maple-parsnip-k62h (npm)
- Aug 14, 2025
Malicious code in maple-oak-8iuj (npm)
Page 5935 of 7,326