Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in actual-free-xbox-codes686 (npm)
- Aug 14, 2025
Malicious code in actual-free-xbox-codes008 (npm)
- Aug 14, 2025
Malicious code in actordata (npm)
- Aug 14, 2025
Malicious code in activscreen-player (npm)
- Aug 14, 2025
Malicious code in activity-reader (npm)
- Aug 14, 2025
Malicious code in activesplit (npm)
- Aug 14, 2025
Malicious code in activeresource-statsd (npm)
- Aug 14, 2025
Malicious code in activerecord-rescue_from_duplicate (npm)
- Aug 14, 2025
Malicious code in activerecord-pedantmysql2-adapter (npm)
- Aug 14, 2025
Malicious code in activerecord-firewall (npm)
- Aug 14, 2025
Malicious code in activerecord-databasevalidations (npm)
- Aug 14, 2025
Malicious code in activepip (npm)
- Aug 14, 2025
Malicious code in activephp (npm)
- Aug 14, 2025
Malicious code in activemerchant (npm)
- Aug 14, 2025
Malicious code in activeextract (npm)
- Aug 14, 2025
Malicious code in active_utils (npm)
- Aug 14, 2025
Malicious code in active_shipping (npm)
- Aug 14, 2025
Malicious code in active_fulfillment (npm)
- Aug 14, 2025
Malicious code in actions-workflow-tools (npm)
- Aug 14, 2025
Malicious code in actions-utils (npm)
- Aug 14, 2025
Malicious code in actionkid (npm)
- Aug 14, 2025
Malicious code in actionaid (npm)
- Aug 14, 2025
Malicious code in acte.js (npm)
- Aug 14, 2025
Malicious code in actaeon (npm)
- Aug 14, 2025
Malicious code in acta365 (npm)
- Aug 14, 2025
Malicious code in acrobatt (npm)
- Aug 14, 2025
Malicious code in acornsdk (npm)
- Aug 14, 2025
Malicious code in acorn-ziggurat-9qqq (npm)
- Aug 14, 2025
Malicious code in acorn-zenith-ggw565-project (npm)
- Aug 14, 2025
Malicious code in acorn-zenith-8zk2 (npm)
- Aug 14, 2025
Malicious code in acorn-xerus-ttd391-project (npm)
- Aug 14, 2025
Malicious code in acorn-uranium-gfx680-project (npm)
- Aug 14, 2025
Malicious code in acorn-underpass-0v2r (npm)
- Aug 14, 2025
Malicious code in acorn-redshift-ai8b (npm)
- Aug 14, 2025
Malicious code in acorn-orbit-0iwi (npm)
- Aug 14, 2025
Malicious code in acorn-opal-gwa884-project (npm)
- Aug 14, 2025
Malicious code in acorn-mist-hcf992-project (npm)
- Aug 14, 2025
Malicious code in acorn-kale-wqm971-project (npm)
- Aug 14, 2025
Malicious code in acorn-jupiter-0uhr (npm)
- Aug 14, 2025
Malicious code in acorn-foxtrot-cohz (npm)
- Aug 14, 2025
Malicious code in acorn-evergreen-uki208-project (npm)
- Aug 14, 2025
Malicious code in acorn-emerald-kwg033-project (npm)
- Aug 14, 2025
Malicious code in acorn-echo-oqo5 (npm)
- Aug 14, 2025
Malicious code in acorn-dolphin-wpx490-project (npm)
- Aug 14, 2025
Malicious code in acorn-dolphin-ero908-project (npm)
- Aug 14, 2025
Malicious code in acorn-boulder-awa769-project (npm)
- Aug 14, 2025
Malicious code in acollab (npm)
- Aug 14, 2025
Malicious code in acocgame (npm)
- Aug 14, 2025
Malicious code in acme-react-components (npm)
- Aug 14, 2025
Malicious code in acme-http-01-sequelize (npm)
Page 6140 of 7,293