Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @malware-test-atony-bajri-noyau-rider/test-mlw3-atony-bajri-noyau-rider (npm)
- Aug 14, 2025
Malicious code in @malware-test-artsy-gault-halon-boyar/test-mlw3-artsy-gault-halon-boyar (npm)
- Aug 14, 2025
Malicious code in @malware-test-arris-haven-nidor-prune/test-mlw3-arris-haven-nidor-prune (npm)
- Aug 14, 2025
Malicious code in @malware-test-aredd-geans-pelts-anans/test-mlw3-aredd-geans-pelts-anans (npm)
- Aug 14, 2025
Malicious code in @malware-test-apayd-juked-adays-duped/test-mlw3-apayd-juked-adays-duped (npm)
- Aug 14, 2025
Malicious code in @malware-test-aorta-laded-voulu-aides/test-mlw3-aorta-laded-voulu-aides (npm)
- Aug 14, 2025
Malicious code in @malware-test-anvil-myths-copse-hying/test-mlw3-anvil-myths-copse-hying (npm)
- Aug 14, 2025
Malicious code in @malware-test-anent-cedis-sered-joyed/test-mlw3-anent-cedis-sered-joyed (npm)
- Aug 14, 2025
Malicious code in @malware-test-anele-lures-kakas-chuff/test-mlw3-anele-lures-kakas-chuff (npm)
- Aug 14, 2025
Malicious code in @malware-test-ampul-kimbo-boors-daraf/test-mlw3-ampul-kimbo-boors-daraf (npm)
- Aug 14, 2025
Malicious code in @malware-test-ambry-kytes-octas-meson/test-mlw3-ambry-kytes-octas-meson (npm)
- Aug 14, 2025
Malicious code in @malware-test-alums-laver-yenta-benes/test-mlw3-alums-laver-yenta-benes (npm)
- Aug 14, 2025
Malicious code in @malware-test-altos-kibes-drome-sooks/test-mlw3-altos-kibes-drome-sooks (npm)
- Aug 14, 2025
Malicious code in @malware-test-alert-mates-pizza-unfed/test-mlw3-alert-mates-pizza-unfed (npm)
- Aug 14, 2025
Malicious code in @malware-test-aland-woken-pughs-aunes/test-mlw3-aland-woken-pughs-aunes (npm)
- Aug 14, 2025
Malicious code in @malware-test-airer-dojos-rabat-mased/test-mlw3-airer-dojos-rabat-mased (npm)
- Aug 14, 2025
Malicious code in @malware-test-agons-woven-davit-onned/test-mlw3-agons-woven-davit-onned (npm)
- Aug 14, 2025
Malicious code in @malware-test-agons-anise-skits-alter/test-mlw3-agons-anise-skits-alter (npm)
- Aug 14, 2025
Malicious code in @malware-test-aflaj-scala-alike-pilau/test-mlw3-aflaj-scala-alike-pilau (npm)
- Aug 14, 2025
Malicious code in @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer (npm)
- Aug 14, 2025
Malicious code in @malware-test-adapt-redds-crees-giant/test-mlw3-adapt-redds-crees-giant (npm)
- Aug 14, 2025
Malicious code in @malware-test-adage-fisks-steek-ogler/test-mlw3-adage-fisks-steek-ogler (npm)
- Aug 14, 2025
Malicious code in @malware-test-acmes-cloth-rotal-saily/test-mlw3-acmes-cloth-rotal-saily (npm)
- Aug 14, 2025
Malicious code in @malware-test-acini-mened-spins-yobbo/test-mlw3-acini-mened-spins-yobbo (npm)
- Aug 14, 2025
Malicious code in @malware-test-aches-fenny-acock-treys/test-mlw3-aches-fenny-acock-treys (npm)
- Aug 14, 2025
Malicious code in @malware-test-abune-surfy-veers-ducky/test-mlw3-abune-surfy-veers-ducky (npm)
- Aug 14, 2025
Malicious code in @malware-test-abore-poets-kakas-narco/test-mlw3-abore-poets-kakas-narco (npm)
- Aug 14, 2025
Malicious code in @malware-test-abear-aglet-solan-sangs/test-mlw3-abear-aglet-solan-sangs (npm)
- Aug 14, 2025
Malicious code in @malware-test-abbot-roars-newly-grain/test-mlw3-abbot-roars-newly-grain (npm)
- Aug 14, 2025
Malicious code in @mallutrojan005/test (npm)
- Aug 14, 2025
Malicious code in @mallutrojan005/mallu (npm)
- Aug 14, 2025
Malicious code in @local-unit/ui-kit (npm)
- Aug 14, 2025
Malicious code in @lion-team/place-search (npm)
- Aug 14, 2025
Malicious code in @lion-team/gcp-deploy (npm)
- Aug 14, 2025
Malicious code in @lion-team/analytics (npm)
- Aug 14, 2025
Malicious code in @lineman/ui (npm)
- Aug 14, 2025
Malicious code in @lineman/sdk (npm)
- Aug 14, 2025
Malicious code in @lineman/liff-react (npm)
- Aug 14, 2025
Malicious code in @lightspeed-hospitality/analytics (npm)
- Aug 14, 2025
Malicious code in @light-widgets/legacy (npm)
- Aug 14, 2025
Malicious code in @libtommy2024/provident-vero-porro-repellat (npm)
- Aug 14, 2025
Malicious code in @libtommy2024/eum-suscipit-aperiam-optio (npm)
- Aug 14, 2025
Malicious code in @libtommy2024/ducimus-nesciunt-doloremque-eligendi (npm)
- Aug 14, 2025
Malicious code in @libtommy2024/deleniti-aut-velit-libero (npm)
- Aug 14, 2025
Malicious code in @libtommy2024/accusamus-dolorum-placeat-eum (npm)
- Aug 14, 2025
Malicious code in @libtommy/shiny-octo-giggle (npm)
- Aug 14, 2025
Malicious code in @leofinzelik/rainbowkit (npm)
- Aug 14, 2025
Malicious code in @legalzoom/auth (npm)
- Aug 14, 2025
Malicious code in @legalzoom/assets-manager (npm)
- Aug 14, 2025
Malicious code in @legalzoom/ai-assistant (npm)
Page 5170 of 6,668