Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in acme-http-01-s3 (npm)
- Aug 14, 2025
Malicious code in acme-http-01-reddis (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-lightsail (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-freedns (npm)
- Aug 14, 2025
Malicious code in acme-dns-01-dyndns (npm)
- Aug 14, 2025
Malicious code in acmapi (npm)
- Aug 14, 2025
Malicious code in acmake (npm)
- Aug 14, 2025
Malicious code in ackwovziyxkrehjt (npm)
- Aug 14, 2025
Malicious code in acidwater (npm)
- Aug 14, 2025
Malicious code in achsynku (npm)
- Aug 14, 2025
Malicious code in achernar-typeorm-webdriver-manager-ursa (npm)
- Aug 14, 2025
Malicious code in achernar-soap-acamar-geomorphology (npm)
- Aug 14, 2025
Malicious code in achernar-restart-futurology-bionics (npm)
- Aug 14, 2025
Malicious code in achernar-pegasus-dactyl-carpo (npm)
- Aug 14, 2025
Malicious code in achernar-mensa-umbra-delphinus (npm)
- Aug 14, 2025
Malicious code in achernar-local-nucleosynthesis-mesosphere (npm)
- Aug 14, 2025
Malicious code in acghrom (npm)
- Aug 14, 2025
Malicious code in acerta-calendar-gui (npm)
- Aug 14, 2025
Malicious code in ace-one-widget-self-hosting (npm)
- Aug 14, 2025
Malicious code in accumunet (npm)
- Aug 14, 2025
Malicious code in acctla (npm)
- Aug 14, 2025
Malicious code in accretion-vulcan-testcafe-subscription (npm)
- Aug 14, 2025
Malicious code in accretion-puppeteer-pegasus-sync (npm)
- Aug 14, 2025
Malicious code in accretion-nightmare-rate-limiter-nuxtjs (npm)
- Aug 14, 2025
Malicious code in accretion-luna-materialize-process (npm)
- Aug 14, 2025
Malicious code in accretion-ichnology-koa-husky (npm)
- Aug 14, 2025
Malicious code in accretion-galaxy-accretion-eslint (npm)
- Aug 14, 2025
Malicious code in accretion-foundation-karma-paleoceanography (npm)
- Aug 14, 2025
Malicious code in accretion-cosmiconfig-telesto-pegasus (npm)
- Aug 14, 2025
Malicious code in accounts-react-components (npm)
- Aug 14, 2025
Malicious code in accounts-fonts (npm)
- Aug 14, 2025
Malicious code in account.propertyconnect (npm)
- Aug 14, 2025
Malicious code in account-manager-ui (npm)
- Aug 14, 2025
Malicious code in acclogger (npm)
- Aug 14, 2025
Malicious code in accgen (npm)
- Aug 14, 2025
Malicious code in accelerate-cli (npm)
- Aug 14, 2025
Malicious code in accela-ds-angular (npm)
- Aug 14, 2025
Malicious code in acamar-paleoecology-upgrade-cosmology (npm)
- Aug 14, 2025
Malicious code in acamar-acamar-cz-conventional-changelog-solis (npm)
- Aug 14, 2025
Malicious code in acadgild (npm)
- Aug 14, 2025
Malicious code in ac1 (npm)
- Aug 14, 2025
Malicious code in ac-window-delegate (npm)
- Aug 14, 2025
Malicious code in ac-element-tracker (npm)
- Aug 14, 2025
Malicious code in ac-dom-traversal (npm)
- Aug 14, 2025
Malicious code in ac-dom-metrics (npm)
- Aug 14, 2025
Malicious code in ac-dom-emitter (npm)
- Aug 14, 2025
Malicious code in ac-console (npm)
- Aug 14, 2025
Malicious code in ac-addon (npm)
- Aug 14, 2025
Malicious code in abstract-permission-root-kappa-deploy (npm)
- Aug 14, 2025
Malicious code in absolver (npm)
Page 6141 of 7,293