Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in 9u95ou (npm)
- Aug 14, 2025
Malicious code in 9mqz3t (npm)
- Aug 14, 2025
Malicious code in 9c-lord-backend (npm)
- Aug 14, 2025
Malicious code in 9asghi (npm)
- Aug 14, 2025
Malicious code in 986reddit-free-xbox-codes (npm)
- Aug 14, 2025
Malicious code in 911-js-test-example (npm)
- Aug 14, 2025
Malicious code in 901free-xbox-ea-access-codes (npm)
- Aug 14, 2025
Malicious code in 8chan (npm)
- Aug 14, 2025
Malicious code in 8agv2b (npm)
- Aug 14, 2025
Malicious code in 8888acc-utility-service-nodejs-clien (npm)
- Aug 14, 2025
Malicious code in 8888acc-shared-helper (npm)
- Aug 14, 2025
Malicious code in 837_x12_generator (npm)
- Aug 14, 2025
Malicious code in 8.9.4 (npm)
- Aug 14, 2025
Malicious code in 7xutgwcbyhwpwzo292ustuko9g78zi2v (npm)
- Aug 14, 2025
Malicious code in 7kuwgb (npm)
- Aug 14, 2025
Malicious code in 79a3ed (npm)
- Aug 14, 2025
Malicious code in 77z8zt (npm)
- Aug 14, 2025
Malicious code in 6rupsrodzhcmn17rlfxd857qk3ijrzho (npm)
- Aug 14, 2025
Malicious code in 6mydt8 (npm)
- Aug 14, 2025
Malicious code in 6jspuj (npm)
- Aug 14, 2025
Malicious code in 6cjxsscyfifgqq48wwvh6r4byjv8xluc (npm)
- Aug 14, 2025
Malicious code in 6c0471 (npm)
- Aug 14, 2025
Malicious code in 69d1a00e-7f6c-40a4-ab2e-70257bcd245c-es2015 (npm)
- Aug 14, 2025
Malicious code in 690snapchat-score-new-decrease (npm)
- Aug 14, 2025
Malicious code in 65710f05-a7c1-48d1-9ee5-acdfb7f70007 (npm)
- Aug 14, 2025
Malicious code in 5pnlfp (npm)
- Aug 14, 2025
Malicious code in 5dr2a (npm)
- Aug 14, 2025
Malicious code in 5819xe (npm)
- Aug 14, 2025
Malicious code in 51flhh (npm)
- Aug 14, 2025
Malicious code in 4lectron (npm)
- Aug 14, 2025
Malicious code in 4equest (npm)
- Aug 14, 2025
Malicious code in 4electron (npm)
- Aug 14, 2025
Malicious code in 430155697 (npm)
- Aug 14, 2025
Malicious code in 3x4abc (npm)
- Aug 14, 2025
Malicious code in 3vbyq06j1lssbvjrabcl5i1edem06ois (npm)
- Aug 14, 2025
Malicious code in 3sfe (npm)
- Aug 14, 2025
Malicious code in 3lectron (npm)
- Aug 14, 2025
Malicious code in 3electron (npm)
- Aug 14, 2025
Malicious code in 391free-cold-war-codes-xbox (npm)
- Aug 14, 2025
Malicious code in 360-products (npm)
- Aug 14, 2025
Malicious code in 2o3t-eslint-config (npm)
- Aug 14, 2025
Malicious code in 2klic-api-engine (npm)
- Aug 14, 2025
Malicious code in 2hvogw (npm)
- Aug 14, 2025
Malicious code in 2bd0pk (npm)
- Aug 14, 2025
Malicious code in 263snap-score-new-99-percentile (npm)
- Aug 14, 2025
Malicious code in 254-shades-of-grey (npm)
- Aug 14, 2025
Malicious code in 23qwerty32 (npm)
- Aug 14, 2025
Malicious code in 229download-webtoon-free-coins (npm)
- Aug 14, 2025
Malicious code in 21st-angular (npm)
- Aug 14, 2025
Malicious code in 202512jeet (npm)
Page 5198 of 6,667