Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in avosjfort (npm)
- Aug 14, 2025
Malicious code in avoncr (npm)
- Aug 14, 2025
Malicious code in AVNjs (npm)
- Aug 14, 2025
Malicious code in avior-stop-xml-version (npm)
- Aug 14, 2025
Malicious code in avior-halley-postgres-lynx (npm)
- Aug 14, 2025
Malicious code in avior-cygnus-borealis-acamar (npm)
- Aug 14, 2025
Malicious code in avior-chai-html-webpack-plugin-pegasus (npm)
- Aug 14, 2025
Malicious code in avior-antares-update-bunyan (npm)
- Aug 14, 2025
Malicious code in avior-antares-adonis-websockets (npm)
- Aug 14, 2025
Malicious code in aviation-scrapper (npm)
- Aug 14, 2025
Malicious code in avgviewer (npm)
- Aug 14, 2025
Malicious code in avgmaker (npm)
- Aug 14, 2025
Malicious code in avertixjs (npm)
- Aug 14, 2025
Malicious code in averaged (npm)
- Aug 14, 2025
Malicious code in avantech-app-commons (npm)
- Aug 14, 2025
Malicious code in avantech-api-commons (npm)
- Aug 14, 2025
Malicious code in avancore (npm)
- Aug 14, 2025
Malicious code in avalon-util-plugin (npm)
- Aug 14, 2025
Malicious code in avalon-util-cli (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-xmlhttprequest (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-websocket (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-ui (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-studio (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-spine (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-socketio (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-reload (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-physics3d (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-opengl (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-navmesh (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-files (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-extension (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-experimental-video (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-chipmunk (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-builder (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-3d-extension (npm)
- Aug 14, 2025
Malicious code in avalon-plugin-3d (npm)
- Aug 14, 2025
Malicious code in avalon-cli-server (npm)
- Aug 14, 2025
Malicious code in avalon-cli-run-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli-prepare-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli-download (npm)
- Aug 14, 2025
Malicious code in avalon-cli-create (npm)
- Aug 14, 2025
Malicious code in avalon-cli-console (npm)
- Aug 14, 2025
Malicious code in avalon-cli-build-ios (npm)
- Aug 14, 2025
Malicious code in avalon-cli (npm)
- Aug 14, 2025
Malicious code in available-slug (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-source-tags-codes-cd4tp-nojdxy (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-revolution-j9gvf-mnvayq (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-aw-cmon-7vtid-fqzrrj (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-a-ghost-is-born-fgmfl-kscsps (npm)
- Aug 14, 2025
Malicious code in availab-le-alb-um-zip-47309-then-play-on-g62ow-pkbmnx (npm)
Page 6117 of 7,293