Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in maple-nutmeg-92ww (npm)
- Aug 14, 2025
Malicious code in maple-larch-s5ws (npm)
- Aug 14, 2025
Malicious code in maple-juniper-8is5 (npm)
- Aug 14, 2025
Malicious code in mapinfo (npm)
- Aug 14, 2025
Malicious code in mapbox-studio (npm)
- Aug 14, 2025
Malicious code in mapbox-streets-source (npm)
- Aug 14, 2025
Malicious code in map-project (npm)
- Aug 14, 2025
Malicious code in map-mdb (npm)
- Aug 14, 2025
Malicious code in map-driver-eta (npm)
- Aug 14, 2025
Malicious code in map-core (npm)
- Aug 14, 2025
Malicious code in manyvis (npm)
- Aug 14, 2025
Malicious code in manucon (npm)
- Aug 14, 2025
Malicious code in mantle-reveal-md-hugo-solarnebula (npm)
- Aug 14, 2025
Malicious code in mantle-paleoceanography-mira-auth0 (npm)
- Aug 14, 2025
Malicious code in mantle-hydrogeology-pavo-nanotechnology (npm)
- Aug 14, 2025
Malicious code in mantle-async-nebula-postgres (npm)
- Aug 14, 2025
Malicious code in mantheon (npm)
- Aug 14, 2025
Malicious code in mansourez (npm)
- Aug 14, 2025
Malicious code in manojmath (npm)
- Aug 14, 2025
Malicious code in manojdemo (npm)
- Aug 14, 2025
Malicious code in manitza (npm)
- Aug 14, 2025
Malicious code in manifold-website (npm)
- Aug 14, 2025
Malicious code in mangujs (npm)
- Aug 14, 2025
Malicious code in mangrove-xylophone-ijv279-project (npm)
- Aug 14, 2025
Malicious code in mangrove-wisp-xpi276-project (npm)
- Aug 14, 2025
Malicious code in mangrove-river-cyp827-project (npm)
- Aug 14, 2025
Malicious code in mangrove-quartz-pxt686-project (npm)
- Aug 14, 2025
Malicious code in mangrove-quagmire-wei991-project (npm)
- Aug 14, 2025
Malicious code in mangrove-moon-peo861-project (npm)
- Aug 14, 2025
Malicious code in mangrove-kaleidoscope-gpo569-project (npm)
- Aug 14, 2025
Malicious code in mangrove-jewel-hdz629-project (npm)
- Aug 14, 2025
Malicious code in mangrove-galaxy-kpd556-project (npm)
- Aug 14, 2025
Malicious code in mangrove-dandelion-orb520-project (npm)
- Aug 14, 2025
Malicious code in mangrove-crystal-oeh601-project (npm)
- Aug 14, 2025
Malicious code in mangrove-cat-irm285-project (npm)
- Aug 14, 2025
Malicious code in mangrove-blossom-sru662-project (npm)
- Aug 14, 2025
Malicious code in mango-zulu-delta-xfryn (npm)
- Aug 14, 2025
Malicious code in mango-zucchini-zbzj (npm)
- Aug 14, 2025
Malicious code in mango-yfs-project (npm)
- Aug 14, 2025
Malicious code in mango-yew-j76i (npm)
- Aug 14, 2025
Malicious code in mango-yeb-project (npm)
- Aug 14, 2025
Malicious code in mango-xkj-project (npm)
- Aug 14, 2025
Malicious code in mango-wmu-project (npm)
- Aug 14, 2025
Malicious code in mango-wasabi-qhd3 (npm)
- Aug 14, 2025
Malicious code in mango-victor-xylb (npm)
- Aug 14, 2025
Malicious code in mango-victor-lfyq (npm)
- Aug 14, 2025
Malicious code in mango-vanilla-strawberry-vrojw (npm)
- Aug 14, 2025
Malicious code in mango-uniform-elgx (npm)
- Aug 14, 2025
Malicious code in mango-uaz-project (npm)
- Aug 14, 2025
Malicious code in mango-tangerine-golf-wazkc (npm)
Page 5936 of 7,326