Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in auto_release_notes-test (npm)
- Aug 14, 2025
Malicious code in auto_release_notes (npm)
- Aug 14, 2025
Malicious code in auto-create-tickets (npm)
- Aug 14, 2025
Malicious code in auto-cdnify (npm)
- Aug 14, 2025
Malicious code in authub-core-module (npm)
- Aug 14, 2025
Malicious code in authub-core-filter (npm)
- Aug 14, 2025
Malicious code in authtoken-paypal (npm)
- Aug 14, 2025
Malicious code in authorStats (npm)
- Aug 14, 2025
Malicious code in authorly (npm)
- Aug 14, 2025
Malicious code in authorize-theta-xi-quick-user (npm)
- Aug 14, 2025
Malicious code in authorize-interpret-notify-benchmark-protected (npm)
- Aug 14, 2025
Malicious code in authorize-daemon-container-awk-kernel (npm)
- Aug 14, 2025
Malicious code in authentigator (npm)
- Aug 14, 2025
Malicious code in authenticate-log-lambda-double-notify (npm)
- Aug 14, 2025
Malicious code in authenticate-enum-report-query-moon (npm)
- Aug 14, 2025
Malicious code in auth0-remark-mutation-morgan (npm)
- Aug 14, 2025
Malicious code in auth0-mcp-server (npm)
- Aug 14, 2025
Malicious code in auth0-kardashevscale-proxima-start (npm)
- Aug 14, 2025
Malicious code in auth0-extension-voice-factor (npm)
- Aug 14, 2025
Malicious code in auth0-eslint-config-capella-pino-pretty (npm)
- Aug 14, 2025
Malicious code in auth0-base (npm)
- Aug 14, 2025
Malicious code in auth0-apollo-astro-eclipse (npm)
- Aug 14, 2025
Malicious code in auth.pkg (npm)
- Aug 14, 2025
Malicious code in auth-paypal (npm)
- Aug 14, 2025
Malicious code in auth-jwt-csrf-kinetic (npm)
- Aug 14, 2025
Malicious code in auth-graviton-wasat-astrochemistry (npm)
- Aug 14, 2025
Malicious code in auth-eslint-plugin-wormhole-eslint (npm)
- Aug 14, 2025
Malicious code in auth-apollo-geckodriver-package (npm)
- Aug 14, 2025
Malicious code in auth-alu0100785050 (npm)
- Aug 14, 2025
Malicious code in australis-primatology-ignite-markdown (npm)
- Aug 14, 2025
Malicious code in australis-polaris-neptune-react-bootstrap (npm)
- Aug 14, 2025
Malicious code in australis-parallax-tailwindcss-sedna (npm)
- Aug 14, 2025
Malicious code in australis-nightwatch-prettier-plugin-markdown-tectonophysics (npm)
- Aug 14, 2025
Malicious code in australis-magellan-paleontology-nanotechnology (npm)
- Aug 14, 2025
Malicious code in australis-jsonp-janus-non-blocking (npm)
- Aug 14, 2025
Malicious code in australis-husky-jabbah-fork (npm)
- Aug 14, 2025
Malicious code in australis-foundation-helios-antares (npm)
- Aug 14, 2025
Malicious code in australis-commitlint-loopback-wolf (npm)
- Aug 14, 2025
Malicious code in aurora_w7e36_oyu7j_karma (npm)
- Aug 14, 2025
Malicious code in aurora_uxq0w_6xjjr_lily (npm)
- Aug 14, 2025
Malicious code in aurora_njuhu_jm809_raven (npm)
- Aug 14, 2025
Malicious code in aurora_j6v3r_v93qi_cascade (npm)
- Aug 14, 2025
Malicious code in aurora_hycr9_vzwue_quicksilver (npm)
- Aug 14, 2025
Malicious code in aurora_f4bzh_dt8vt_pinnacle (npm)
- Aug 14, 2025
Malicious code in aurora_employee_assign (npm)
- Aug 14, 2025
Malicious code in aurora_crdbh_xsrsc_echo (npm)
- Aug 14, 2025
Malicious code in aurora_3c2d5_aae9z_jasmine (npm)
- Aug 14, 2025
Malicious code in aurora-theme (npm)
- Aug 14, 2025
Malicious code in aurora-scribe (npm)
- Aug 14, 2025
Malicious code in aurora-neuromorphic-paleoanthropology-weywot (npm)
Page 6119 of 7,293