Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in asteroid-quasar-wk9r (npm)
- Aug 14, 2025
Malicious code in asteroid-pebble-ctd957-project (npm)
- Aug 14, 2025
Malicious code in asteroid-paradise-pee257-project (npm)
- Aug 14, 2025
Malicious code in asteroid-orchid-xvb262-project (npm)
- Aug 14, 2025
Malicious code in asteroid-lagoon-dpn557-project (npm)
- Aug 14, 2025
Malicious code in asteroid-hotel-rii0 (npm)
- Aug 14, 2025
Malicious code in asteroid-gacrux-husky-slides (npm)
- Aug 14, 2025
Malicious code in asteroid-everest-dok969-project (npm)
- Aug 14, 2025
Malicious code in asteroid-cascade-lik762-project (npm)
- Aug 14, 2025
Malicious code in asteroid-andromeda-superagent-terser (npm)
- Aug 14, 2025
Malicious code in asteroid-alpha-ad0m (npm)
- Aug 14, 2025
Malicious code in assignment-2-calendar (npm)
- Aug 14, 2025
Malicious code in assignment-02 (npm)
- Aug 14, 2025
Malicious code in assigment (npm)
- Aug 14, 2025
Malicious code in assetslush (npm)
- Aug 14, 2025
Malicious code in asset_pipeline (npm)
- Aug 14, 2025
Malicious code in asset_cloud (npm)
- Aug 14, 2025
Malicious code in asset-viewer (npm)
- Aug 14, 2025
Malicious code in asset-pipeline-yaml-combiner (npm)
- Aug 14, 2025
Malicious code in assert-tau-eta-good-earth (npm)
- Aug 14, 2025
Malicious code in assert-new-compress-mu-key (npm)
- Aug 14, 2025
Malicious code in assapir-test25 (npm)
- Aug 14, 2025
Malicious code in asrulalfi (npm)
- Aug 14, 2025
Malicious code in asprom (npm)
- Aug 14, 2025
Malicious code in asproject (npm)
- Aug 14, 2025
Malicious code in asphalt-9-legends-tokens-generator (npm)
- Aug 14, 2025
Malicious code in aspen_m90z2_ktm1h_cascade (npm)
- Aug 14, 2025
Malicious code in aspen_l9ycs_blrki_zinnia (npm)
- Aug 14, 2025
Malicious code in aspen_8afsh_ugcnk_cascade (npm)
- Aug 14, 2025
Malicious code in aspen_6uohn_zqr7i_kismet (npm)
- Aug 14, 2025
Malicious code in aspen-yak-uhn020-project (npm)
- Aug 14, 2025
Malicious code in aspen-xerus-erj514-project (npm)
- Aug 14, 2025
Malicious code in aspen-xerox-hrj009-project (npm)
- Aug 14, 2025
Malicious code in aspen-whale-ygr161-project (npm)
- Aug 14, 2025
Malicious code in aspen-spruce-sfr848-project (npm)
- Aug 14, 2025
Malicious code in aspen-river-maz094-project (npm)
- Aug 14, 2025
Malicious code in aspen-paradise-kst547-project (npm)
- Aug 14, 2025
Malicious code in aspen-octopus-iaj797-project (npm)
- Aug 14, 2025
Malicious code in aspen-kiwi-zry149-project (npm)
- Aug 14, 2025
Malicious code in aspen-kiwi-map642-project (npm)
- Aug 14, 2025
Malicious code in aspen-kale-cig976-project (npm)
- Aug 14, 2025
Malicious code in aspen-honeycomb-kba226-project (npm)
- Aug 14, 2025
Malicious code in aspen-cliff-mrd813-project (npm)
- Aug 14, 2025
Malicious code in aspen-boulder-hpk856-project (npm)
- Aug 14, 2025
Malicious code in aspen-bamboo-zcg358-project (npm)
- Aug 14, 2025
Malicious code in aspen-8w0r9-pjzoz-silk-project (npm)
- Aug 14, 2025
Malicious code in aspen-11t6o-1wdye-haven-project (npm)
- Aug 14, 2025
Malicious code in asos-web-secure-script-container (npm)
- Aug 14, 2025
Malicious code in asojiwbiwe (npm)
- Aug 14, 2025
Malicious code in asnyc (npm)
Page 6122 of 7,293