Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in aquarius-pino-aurora-eridanus (npm)
- Aug 14, 2025
Malicious code in aquarius-entanglement-hydrogeology-geodynamo (npm)
- Aug 14, 2025
Malicious code in aquarius-elara-andromeda-equinox (npm)
- Aug 14, 2025
Malicious code in aquarius-delphinus-less-iota (npm)
- Aug 14, 2025
Malicious code in aquarius-async-prettier-gulp (npm)
- Aug 14, 2025
Malicious code in apwimgr (npm)
- Aug 14, 2025
Malicious code in apuntes (npm)
- Aug 14, 2025
Malicious code in apui (npm)
- Aug 14, 2025
Malicious code in aptrental (npm)
- Aug 14, 2025
Malicious code in aptman (npm)
- Aug 14, 2025
Malicious code in aptest (npm)
- Aug 14, 2025
Malicious code in appytw (npm)
- Aug 14, 2025
Malicious code in appyday (npm)
- Aug 14, 2025
Malicious code in appx-compiler (npm)
- Aug 14, 2025
Malicious code in appwall (npm)
- Aug 14, 2025
Malicious code in appversion-generator (npm)
- Aug 14, 2025
Malicious code in apptmpl (npm)
- Aug 14, 2025
Malicious code in appsworld (npm)
- Aug 14, 2025
Malicious code in appstor (npm)
- Aug 14, 2025
Malicious code in appsdks (npm)
- Aug 14, 2025
Malicious code in appsaholic-sdk (npm)
- Aug 14, 2025
Malicious code in apps-script-oauth2 (npm)
- Aug 14, 2025
Malicious code in approval-workflow (npm)
- Aug 14, 2025
Malicious code in approuter (npm)
- Aug 14, 2025
Malicious code in approject (npm)
- Aug 14, 2025
Malicious code in apprepo (npm)
- Aug 14, 2025
Malicious code in appointment-widget (npm)
- Aug 14, 2025
Malicious code in appmarx (npm)
- Aug 14, 2025
Malicious code in appmania (npm)
- Aug 14, 2025
Malicious code in appmake (npm)
- Aug 14, 2025
Malicious code in applovin-max-native-plugin-demo (npm)
- Aug 14, 2025
Malicious code in applitest (npm)
- Aug 14, 2025
Malicious code in applications.services.devcloud.image-search-client (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in apple_portal_sync (npm)
- Aug 14, 2025
Malicious code in apple-zucchini-strawberry-sggqf (npm)
- Aug 14, 2025
Malicious code in apple-zucchini-raspberry-glbnu (npm)
- Aug 14, 2025
Malicious code in apple-yankee-mbaa (npm)
- Aug 14, 2025
Malicious code in apple-yam-kusc (npm)
- Aug 14, 2025
Malicious code in apple-xwq-project (npm)
- Aug 14, 2025
Malicious code in apple-xta-project (npm)
- Aug 14, 2025
Malicious code in apple-wek-project (npm)
- Aug 14, 2025
Malicious code in apple-watermelon-vanilla-lwavc (npm)
- Aug 14, 2025
Malicious code in apple-vm1-project (npm)
- Aug 14, 2025
Malicious code in apple-victor-nrgc (npm)
- Aug 14, 2025
Malicious code in apple-vanilla-uknp (npm)
- Aug 14, 2025
Malicious code in apple-vanilla-qkbb (npm)
- Aug 14, 2025
Malicious code in apple-uz8-project (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-tryf (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-papaya-vehsm (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-ltdn (npm)
Page 6126 of 7,293