Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in asnc (npm)
- Aug 14, 2025
Malicious code in asmcrypto (npm)
- Aug 14, 2025
Malicious code in aslodocs (npm)
- Aug 14, 2025
Malicious code in asinc (npm)
- Aug 14, 2025
Malicious code in asign-user-front-end (npm)
- Aug 14, 2025
Malicious code in asianhallinta-secret (npm)
- Aug 14, 2025
Malicious code in ashore (npm)
- Aug 14, 2025
Malicious code in ashok-angular2-login (npm)
- Aug 14, 2025
Malicious code in ash-q3gt7-hrboq-whisper-project (npm)
- Aug 14, 2025
Malicious code in ash-profile (npm)
- Aug 14, 2025
Malicious code in ash-history (npm)
- Aug 14, 2025
Malicious code in ash-drag-drop (npm)
- Aug 14, 2025
Malicious code in ash-cwnhs-8s6qq-mirage-project (npm)
- Aug 14, 2025
Malicious code in ash-bmadi-535bf-fjord-project (npm)
- Aug 14, 2025
Malicious code in ash-5n1ax-68m0q-cascade-project (npm)
- Aug 14, 2025
Malicious code in ash-5grfr-jsbt8-crystal-project (npm)
- Aug 14, 2025
Malicious code in ash-1fcz8-nntfy-paradise-project (npm)
- Aug 14, 2025
Malicious code in asghar (npm)
- Aug 14, 2025
Malicious code in aseturtle (npm)
- Aug 14, 2025
Malicious code in asembed (npm)
- Aug 14, 2025
Malicious code in asdfdsdfsdf (npm)
- Aug 14, 2025
Malicious code in asdaww3243d (npm)
- Aug 14, 2025
Malicious code in asd-tt (npm)
- Aug 14, 2025
Malicious code in asatoafm (npm)
- Aug 14, 2025
Malicious code in asa-demo-node (npm)
- Aug 14, 2025
Malicious code in as-core-ui (npm)
- Aug 14, 2025
Malicious code in arwallgs3ivfw3jqzgqihqt9qajrv3tr (npm)
- Aug 14, 2025
Malicious code in artyom (npm)
- Aug 14, 2025
Malicious code in artycok (npm)
- Aug 14, 2025
Malicious code in artschool (npm)
- Aug 14, 2025
Malicious code in artmatch (npm)
- Aug 14, 2025
Malicious code in artmaster (npm)
- Aug 14, 2025
Malicious code in artless (npm)
- Aug 14, 2025
Malicious code in artistmap (npm)
- Aug 14, 2025
Malicious code in artisone (npm)
- Aug 14, 2025
Malicious code in article-curation (npm)
- Aug 14, 2025
Malicious code in arthur-utils (npm)
- Aug 14, 2025
Malicious code in arthur-middleware (npm)
- Aug 14, 2025
Malicious code in arthur-lib (npm)
- Aug 14, 2025
Malicious code in artbit (npm)
- Aug 14, 2025
Malicious code in arsgit (npm)
- Aug 14, 2025
Malicious code in arsenic-tabasco-cyborg-peanut-butter (npm)
- Aug 14, 2025
Malicious code in arroute (npm)
- Aug 14, 2025
Malicious code in arrdril712 (npm)
- Aug 14, 2025
Malicious code in array-xi-hot-psi-psi (npm)
- Aug 14, 2025
Malicious code in array-wind-user-data-rain (npm)
- Aug 14, 2025
Malicious code in array-routes (npm)
- Aug 14, 2025
Malicious code in array-join-seperators (npm)
- Aug 14, 2025
Malicious code in array-hash-view-balance-authenticate (npm)
- Aug 14, 2025
Malicious code in array-compress (npm)
Page 6123 of 7,293