Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in ardosubs (npm)
- Aug 14, 2025
Malicious code in arddroid (npm)
- Aug 14, 2025
Malicious code in arcturus-server-neptunology-centaurus (npm)
- Aug 14, 2025
Malicious code in arcturus-paleoecology-proxima-eventhoriz (npm)
- Aug 14, 2025
Malicious code in arcturus-global-hermes-less-loader (npm)
- Aug 14, 2025
Malicious code in arcturus-genomics-nestjs-boson (npm)
- Aug 14, 2025
Malicious code in arcturus-carina-eslint-proxima (npm)
- Aug 14, 2025
Malicious code in arcturus-brane-test-html-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in arcturus-astrophysics-cluster-eris (npm)
- Aug 14, 2025
Malicious code in arcturo (npm)
- Aug 14, 2025
Malicious code in arctic-unicorn-qdk488-project (npm)
- Aug 14, 2025
Malicious code in arctic-river-nts792-project (npm)
- Aug 14, 2025
Malicious code in arctic-orangutan-nka823-project (npm)
- Aug 14, 2025
Malicious code in arctic-opal-xxr872-project (npm)
- Aug 14, 2025
Malicious code in arctic-nimbus-rcn239-project (npm)
- Aug 14, 2025
Malicious code in arctic-lava-ezb031-project (npm)
- Aug 14, 2025
Malicious code in arctic-kale-ntw066-project (npm)
- Aug 14, 2025
Malicious code in arcpubs (npm)
- Aug 14, 2025
Malicious code in archdoom (npm)
- Aug 14, 2025
Malicious code in archbsd (npm)
- Aug 14, 2025
Malicious code in archana (npm)
- Aug 14, 2025
Malicious code in archaeometry-umbriel-callback-io (npm)
- Aug 14, 2025
Malicious code in archaeometry-javascript-jsonp-isostasy (npm)
- Aug 14, 2025
Malicious code in archaeometry-elektra-neutronstar-promise (npm)
- Aug 14, 2025
Malicious code in archaeometry-crust-rate-limiter-sirius (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-resolvers-orogeny-electron-builder (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-nova-centauri-tool (npm)
- Aug 14, 2025
Malicious code in archaeogenetics-deimos-avior-shelljs (npm)
- Aug 14, 2025
Malicious code in archaeoastronomy-hugo-playwright-apollo (npm)
- Aug 14, 2025
Malicious code in arcgis-canc4isr-build (npm)
- Aug 14, 2025
Malicious code in arcade_zdy7u_55bqr_terra (npm)
- Aug 14, 2025
Malicious code in arcade_p59z5_tcsiz_pinnacle (npm)
- Aug 14, 2025
Malicious code in arcade_n7fr7_cr8m7_vista (npm)
- Aug 14, 2025
Malicious code in arcade_jt9vr_apl2t_valley (npm)
- Aug 14, 2025
Malicious code in arcade_jpqzi_hjbx2_fountain (npm)
- Aug 14, 2025
Malicious code in arcade_j6cyb_yyz51_aroma (npm)
- Aug 14, 2025
Malicious code in arcade_ceg1b_stu4q_twilight (npm)
- Aug 14, 2025
Malicious code in arcade_bjchx_77fv1_pulse (npm)
- Aug 14, 2025
Malicious code in arcade_a86zh_bj10r_mirage (npm)
- Aug 14, 2025
Malicious code in arcade_3kkqt_wa5m2_bramble (npm)
- Aug 14, 2025
Malicious code in arc-macro-s3-bucket (npm)
- Aug 14, 2025
Malicious code in arc-branch-to-cmsg (npm)
- Aug 14, 2025
Malicious code in arbprov (npm)
- Aug 14, 2025
Malicious code in arbolgen (npm)
- Aug 14, 2025
Malicious code in arandroid (npm)
- Aug 14, 2025
Malicious code in arakapub (npm)
- Aug 14, 2025
Malicious code in arabicstring (npm)
- Aug 14, 2025
Malicious code in ar_transaction_changes (npm)
- Aug 14, 2025
Malicious code in ar9_atm_project_03 (npm)
- Aug 14, 2025
Malicious code in aquarius-proxima-grunt-eclipse (npm)
Page 6125 of 7,293