Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in apollo-yakutsk-paleoanthropology-aurora (npm)
- Aug 14, 2025
Malicious code in apollo-spectron-cladistics-geochemistry (npm)
- Aug 14, 2025
Malicious code in apollo-regulus-commitizen-webdriverio (npm)
- Aug 14, 2025
Malicious code in apollo-nucleosynthesis-inflation-cassini (npm)
- Aug 14, 2025
Malicious code in apollo-mongodb-darkmatter-whitedwarf (npm)
- Aug 14, 2025
Malicious code in apollo-gmail-grabber (npm)
- Aug 14, 2025
Malicious code in apollo-auriga-eslint-config-version (npm)
- Aug 14, 2025
Malicious code in aplay-audio (npm)
- Aug 14, 2025
Malicious code in apkplug (npm)
- Aug 14, 2025
Malicious code in apizoo (npm)
- Aug 14, 2025
Malicious code in apiportal-backend (npm)
- Aug 14, 2025
Malicious code in api-util (npm)
- Aug 14, 2025
Malicious code in api-usage_create-tensor (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in api-shoppe-demo (npm)
- Aug 14, 2025
Malicious code in api-services (npm)
- Aug 14, 2025
Malicious code in api-security-test (npm)
- Aug 14, 2025
Malicious code in api-manh (npm)
- Aug 14, 2025
Malicious code in api-facebooknew (npm)
- Aug 14, 2025
Malicious code in api-devices (npm)
- Aug 14, 2025
Malicious code in api-chatfb-test (npm)
- Aug 14, 2025
Malicious code in api-chatfb (npm)
- Aug 14, 2025
Malicious code in api-chat-fanpage-facebook (npm)
- Aug 14, 2025
Malicious code in api-bot-basil (npm)
- Aug 14, 2025
Malicious code in apfinal (npm)
- Aug 14, 2025
Malicious code in apex-ursa-gatsby-enceladus (npm)
- Aug 14, 2025
Malicious code in apex-promise-transport-commitizen (npm)
- Aug 14, 2025
Malicious code in apex-bioinformatics-development-geodynamo (npm)
- Aug 14, 2025
Malicious code in apeksha (npm)
- Aug 14, 2025
Malicious code in ape-staking-public (npm)
- Aug 14, 2025
Malicious code in ape-portal-public (npm)
- Aug 14, 2025
Malicious code in aparapi (npm)
- Aug 14, 2025
Malicious code in apar (npm)
- Aug 14, 2025
Malicious code in ap607 (npm)
- Aug 14, 2025
Malicious code in ap-is-required-by-the-labour-digital-membership-card (npm)
- Aug 14, 2025
Malicious code in aoxkqljgedbycsif (npm)
- Aug 14, 2025
Malicious code in aou-ui-angular (npm)
- Aug 14, 2025
Malicious code in aoo-component (npm)
- Aug 14, 2025
Malicious code in aoisa (npm)
- Aug 14, 2025
Malicious code in aoidkwpyuveztkhj (npm)
- Aug 14, 2025
Malicious code in aog-control-panel (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in aofl-os (npm)
- Aug 14, 2025
Malicious code in aofeaofe (npm)
- Aug 14, 2025
Malicious code in anykeeper (npm)
- Aug 14, 2025
Malicious code in anviltop (npm)
- Aug 14, 2025
Malicious code in anushok (npm)
- Aug 14, 2025
Malicious code in anupam-action-test (npm)
- Aug 14, 2025
Malicious code in anup-database (npm)
- Aug 14, 2025
Malicious code in antwatch (npm)
- Aug 14, 2025
Malicious code in antsui (npm)
- Aug 14, 2025
Malicious code in antsim (npm)
Page 6128 of 7,293