Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in array-byte-code-reject-promise (npm)
- Aug 14, 2025
Malicious code in arrastar (npm)
- Aug 14, 2025
Malicious code in arquletia (npm)
- Aug 14, 2025
Malicious code in aroma_ck6a6_vhulq_molecule (npm)
- Aug 14, 2025
Malicious code in aroma_bk5ic_dck54_unity (npm)
- Aug 14, 2025
Malicious code in aroma_aquf5_et51g_valley (npm)
- Aug 14, 2025
Malicious code in aroma_7a5jh_i2iev_bloom (npm)
- Aug 14, 2025
Malicious code in aroma-zenith-wgc295-project (npm)
- Aug 14, 2025
Malicious code in aroma-willow-cpn475-project (npm)
- Aug 14, 2025
Malicious code in aroma-waterfall-dla825-project (npm)
- Aug 14, 2025
Malicious code in aroma-sequoia-wyi469-project (npm)
- Aug 14, 2025
Malicious code in aroma-quilt-nwa771-project (npm)
- Aug 14, 2025
Malicious code in aroma-quilt-nfr154-project (npm)
- Aug 14, 2025
Malicious code in aroma-octopus-chu398-project (npm)
- Aug 14, 2025
Malicious code in aroma-meadow-wkc728-project (npm)
- Aug 14, 2025
Malicious code in aroma-forest-lqc825-project (npm)
- Aug 14, 2025
Malicious code in aroma-ecosystem-gsn760-project (npm)
- Aug 14, 2025
Malicious code in aroma-cat-tex268-project (npm)
- Aug 14, 2025
Malicious code in aroma-butterfly-dtz487-project (npm)
- Aug 14, 2025
Malicious code in arnavag (npm)
- Aug 14, 2025
Malicious code in armusdb (npm)
- Aug 14, 2025
Malicious code in armsrace (npm)
- Aug 14, 2025
Malicious code in armoauth (npm)
- Aug 14, 2025
Malicious code in armfly (npm)
- Aug 14, 2025
Malicious code in armageddon-installer (npm)
- Aug 14, 2025
Malicious code in armageddon-client-desktop (npm)
- Aug 14, 2025
Malicious code in armada-dev (npm)
- Aug 14, 2025
Malicious code in arkadiko-dao-landing (npm)
- Aug 14, 2025
Malicious code in arkadiko-dao (npm)
- Aug 14, 2025
Malicious code in ark-survival-ancient-amber-generator (npm)
- Aug 14, 2025
Malicious code in aritawd (npm)
- Aug 14, 2025
Malicious code in arikatoh (npm)
- Aug 14, 2025
Malicious code in arif-empal97-breki (npm)
- Aug 14, 2025
Malicious code in arif-dradag90-sukiwir (npm)
- Aug 14, 2025
Malicious code in aries-toolbox (npm)
- Aug 14, 2025
Malicious code in ariel-solarnebula-webpack-auth (npm)
- Aug 14, 2025
Malicious code in ariel-polaris-cryovolcano-graphql (npm)
- Aug 14, 2025
Malicious code in ariary (npm)
- Aug 14, 2025
Malicious code in argos-findability-url-builder (npm)
- Aug 14, 2025
Malicious code in argo-run (npm)
- Aug 14, 2025
Malicious code in argo-post-purchase (npm)
- Aug 14, 2025
Malicious code in argo-checkout-vue (npm)
- Aug 14, 2025
Malicious code in ares-api-search (npm)
- Aug 14, 2025
Malicious code in ares-api-integrations (npm)
- Aug 14, 2025
Malicious code in areology-nightmare-selenology-configstore (npm)
- Aug 14, 2025
Malicious code in areology-mantle-lithosphere-zephyr (npm)
- Aug 14, 2025
Malicious code in areology-biogeochemistry-non-blocking-commitlint (npm)
- Aug 14, 2025
Malicious code in arenalog (npm)
- Aug 14, 2025
Malicious code in arduboard (npm)
- Aug 14, 2025
Malicious code in ardril712 (npm)
Page 6124 of 7,293