Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in atlas-prosthetics-procyon-cryovolcano (npm)
- Aug 14, 2025
Malicious code in atlas-morgan-antares-remark (npm)
- Aug 14, 2025
Malicious code in atlas-data (npm)
- Aug 14, 2025
Malicious code in atlas-charts (npm)
- Aug 14, 2025
Malicious code in atlas-capella-dynamo-cosmos (npm)
- Aug 14, 2025
Malicious code in athenry (npm)
- Aug 14, 2025
Malicious code in atg-all-in-wonder-player (npm)
- Aug 14, 2025
Malicious code in atfbdg (npm)
- Aug 14, 2025
Malicious code in atbash (npm)
- Aug 14, 2025
Malicious code in atbase (npm)
- Aug 14, 2025
Malicious code in at (npm)
- Aug 14, 2025
Malicious code in asyync (npm)
- Aug 14, 2025
Malicious code in asynnc (npm)
- Aug 14, 2025
Malicious code in asynd (npm)
- Aug 14, 2025
Malicious code in asynctl (npm)
- Aug 14, 2025
Malicious code in async-umbra-xenon-husky (npm)
- Aug 14, 2025
Malicious code in async-swc-plugin (npm)
- Aug 14, 2025
Malicious code in async-sed-small-xml-upsilon (npm)
- Aug 14, 2025
Malicious code in async-promise-testing (npm)
- Aug 14, 2025
Malicious code in async-paleobotany-wolf-eslint-config (npm)
- Aug 14, 2025
Malicious code in async-operation (npm)
- Aug 14, 2025
Malicious code in async-deserialize-xi-assert-shell (npm)
- Aug 14, 2025
Malicious code in async-cosmology-fomalhaut-slidev (npm)
- Aug 14, 2025
Malicious code in async-changelog-semantic-release-higgs (npm)
- Aug 14, 2025
Malicious code in async-boolean-emulate-assert-gamma (npm)
- Aug 14, 2025
Malicious code in async-authenticate-iota-cron-table (npm)
- Aug 14, 2025
Malicious code in async-apollo-standard-child-process (npm)
- Aug 14, 2025
Malicious code in asymc (npm)
- Aug 14, 2025
Malicious code in asycn (npm)
- Aug 14, 2025
Malicious code in astrotitania (npm)
- Aug 14, 2025
Malicious code in astrophysics-less-loader-archaeogenetics-chalk (npm)
- Aug 14, 2025
Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm)
- Aug 14, 2025
Malicious code in astrochemistry-interstellarmedium-speleology-blueshift (npm)
- Aug 14, 2025
Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm)
- Aug 14, 2025
Malicious code in astrochemistry-cosmicsilence-hologram-zephyr (npm)
- Aug 14, 2025
Malicious code in astrochemistry-axios-venus-sirius (npm)
- Aug 14, 2025
Malicious code in astrobiology-singularity-phoebe-venus (npm)
- Aug 14, 2025
Malicious code in astro-xenon-restart-capella (npm)
- Aug 14, 2025
Malicious code in astro-publish-sedna-indus (npm)
- Aug 14, 2025
Malicious code in astro-postgres-init-oauth (npm)
- Aug 14, 2025
Malicious code in astro-neptune-ariel-antimatter (npm)
- Aug 14, 2025
Malicious code in astro-colors-sagitta-cors (npm)
- Aug 14, 2025
Malicious code in astro-cache-ablation-css-loader (npm)
- Aug 14, 2025
Malicious code in asthenosphere-superposition-troposphere-carina (npm)
- Aug 14, 2025
Malicious code in asteroid-yard-rfs559-project (npm)
- Aug 14, 2025
Malicious code in asteroid-xenon-xot613-project (npm)
- Aug 14, 2025
Malicious code in asteroid-vortex-avk169-project (npm)
- Aug 14, 2025
Malicious code in asteroid-vine-qnk968-project (npm)
- Aug 14, 2025
Malicious code in asteroid-supernova-5xbi (npm)
- Aug 14, 2025
Malicious code in asteroid-redshift-xtlf (npm)
Page 6121 of 7,293