Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,356 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @malware-test-lopes-ekkas-felon-avoid/test-mlw3-lopes-ekkas-felon-avoid (npm)
- Aug 14, 2025
Malicious code in @malware-test-lisps-teeny-faith-taros/test-mlw3-lisps-teeny-faith-taros (npm)
- Aug 14, 2025
Malicious code in @malware-test-lisle-jougs/test-mlw3-lisle-jougs (npm)
- Aug 14, 2025
Malicious code in @malware-test-linos-ancon-skull-silks/test-mlw3-linos-ancon-skull-silks (npm)
- Aug 14, 2025
Malicious code in @malware-test-liney-roops-omits-cutin/test-mlw3-liney-roops-omits-cutin (npm)
- Aug 14, 2025
Malicious code in @malware-test-lilac-pryer-bossy-coste/test-mlw3-lilac-pryer-bossy-coste (npm)
- Aug 14, 2025
Malicious code in @malware-test-likin-lifer-waler-tetra/test-mlw3-likin-lifer-waler-tetra (npm)
- Aug 14, 2025
Malicious code in @malware-test-lemes-react-quats-pawaw/test-mlw3-lemes-react-quats-pawaw (npm)
- Aug 14, 2025
Malicious code in @malware-test-lehrs-euros-porge-crept/test-mlw3-lehrs-euros-porge-crept (npm)
- Aug 14, 2025
Malicious code in @malware-test-lefte-logic-whins-kangs/test-mlw3-lefte-logic-whins-kangs (npm)
- Aug 14, 2025
Malicious code in @malware-test-leese-malik-loots-dower/test-mlw3-leese-malik-loots-dower (npm)
- Aug 14, 2025
Malicious code in @malware-test-leave-verso-bucks-foots/test-mlw3-leave-verso-bucks-foots (npm)
- Aug 14, 2025
Malicious code in @malware-test-lears-sebum-pommy-plesh/test-mlw3-lears-sebum-pommy-plesh (npm)
- Aug 14, 2025
Malicious code in @malware-test-leams-posts-sudor-birle/test-mlw3-leams-posts-sudor-birle (npm)
- Aug 14, 2025
Malicious code in @malware-test-lazar-bales-avows-inkle/test-mlw3-lazar-bales-avows-inkle (npm)
- Aug 14, 2025
Malicious code in @malware-test-laved-currs-rimes-taces/test-mlw3-laved-currs-rimes-taces (npm)
- Aug 14, 2025
Malicious code in @malware-test-laugh-demos-cooee-gamme/test-mlw3-laugh-demos-cooee-gamme (npm)
- Aug 14, 2025
Malicious code in @malware-test-later-pupas-moxas-merls/test-mlw3-later-pupas-moxas-merls (npm)
- Aug 14, 2025
Malicious code in @malware-test-lards-lills-ledge-benni/test-mlw3-lards-lills-ledge-benni (npm)
- Aug 14, 2025
Malicious code in @malware-test-lamed-altos-drubs-gaper/test-mlw3-lamed-altos-drubs-gaper (npm)
- Aug 14, 2025
Malicious code in @malware-test-lacet-argil-nolls-gushy/test-mlw3-lacet-argil-nolls-gushy (npm)
- Aug 14, 2025
Malicious code in @malware-test-laces-genii-cobby-feyer/test-mlw3-laces-genii-cobby-feyer (npm)
- Aug 14, 2025
Malicious code in @malware-test-label-spink-snide-abbot/test-mlw3-label-spink-snide-abbot (npm)
- Aug 14, 2025
Malicious code in @malware-test-krait-carom-mosey-squid/test-mlw3-krait-carom-mosey-squid (npm)
- Aug 14, 2025
Malicious code in @malware-test-koans-wowed-kayle-palay/test-mlw3-koans-wowed-kayle-palay (npm)
- Aug 14, 2025
Malicious code in @malware-test-knuts-sweep-tunic-lasso/test-mlw3-knuts-sweep-tunic-lasso (npm)
- Aug 14, 2025
Malicious code in @malware-test-knots-ruing-turms-dunno/test-mlw3-knots-ruing-turms-dunno (npm)
- Aug 14, 2025
Malicious code in @malware-test-khoja-legal-begum-lassi/test-mlw3-khoja-legal-begum-lassi (npm)
- Aug 14, 2025
Malicious code in @malware-test-keirs-corey-wirer-haafs/test-mlw3-keirs-corey-wirer-haafs (npm)
- Aug 14, 2025
Malicious code in @malware-test-kecks-chica-atoms-lipid/test-mlw3-kecks-chica-atoms-lipid (npm)
- Aug 14, 2025
Malicious code in @malware-test-kazoo-syren-waspy-spitz/test-mlw3-kazoo-syren-waspy-spitz (npm)
- Aug 14, 2025
Malicious code in @malware-test-kanga-glads-roked-decks/test-mlw3-kanga-glads-roked-decks (npm)
- Aug 14, 2025
Malicious code in @malware-test-junky-swink-wrack-comma/test-mlw3-junky-swink-wrack-comma (npm)
- Aug 14, 2025
Malicious code in @malware-test-junks-oncer-midge-glaik/test-mlw3-junks-oncer-midge-glaik (npm)
- Aug 14, 2025
Malicious code in @malware-test-jumby-haute-icily-cooks/test-mlw3-jumby-haute-icily-cooks (npm)
- Aug 14, 2025
Malicious code in @malware-test-judas-nyala-spean-softa/test-mlw3-judas-nyala-spean-softa (npm)
- Aug 14, 2025
Malicious code in @malware-test-jolty-colly-heids-dated/test-mlw3-jolty-colly-heids-dated (npm)
- Aug 14, 2025
Malicious code in @malware-test-johns-madid-indie-spoor/test-mlw3-johns-madid-indie-spoor (npm)
- Aug 14, 2025
Malicious code in @malware-test-jerry-stour-stire-trons/test-mlw3-jerry-stour-stire-trons (npm)
- Aug 14, 2025
Malicious code in @malware-test-jenny-debit-utile-drips/test-mlw3-jenny-debit-utile-drips (npm)
- Aug 14, 2025
Malicious code in @malware-test-jells-burgh-sepad-twiny/test-mlw3-jells-burgh-sepad-twiny (npm)
- Aug 14, 2025
Malicious code in @malware-test-jebel-teind-acrid-bosom/test-mlw3-jebel-teind-acrid-bosom (npm)
- Aug 14, 2025
Malicious code in @malware-test-jaunt-serks-strip-tubas/test-mlw3-jaunt-serks-strip-tubas (npm)
- Aug 14, 2025
Malicious code in @malware-test-irons-gulfy-longe-doits/test-mlw3-irons-gulfy-longe-doits (npm)
- Aug 14, 2025
Malicious code in @malware-test-inwit-molly-scena-spits/test-mlw3-inwit-molly-scena-spits (npm)
- Aug 14, 2025
Malicious code in @malware-test-inure-rondo-woven-total/test-mlw3-inure-rondo-woven-total (npm)
- Aug 14, 2025
Malicious code in @malware-test-intil-hules-totem-blabs/test-mlw3-intil-hules-totem-blabs (npm)
- Aug 14, 2025
Malicious code in @malware-test-imshi-gamer-tyned-sposh/test-mlw3-imshi-gamer-tyned-sposh (npm)
- Aug 14, 2025
Malicious code in @malware-test-imbue-sprig-raked-honey/test-mlw3-imbue-sprig-raked-honey (npm)
- Aug 14, 2025
Malicious code in @malware-test-ileum-ergot-rimus-murra/test-mlw3-ileum-ergot-rimus-murra (npm)
Page 5164 of 6,668