Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in 2023-fortnite-free-vbucks-codes-working-dssdz (npm)
- Aug 14, 2025
Malicious code in 2023-coin-master-free-spins-working-codes-efje (npm)
- Aug 14, 2025
Malicious code in 2020-redesign-fascinator (npm)
- Aug 14, 2025
Malicious code in 2.9.1-genesis-bugs-rc1 (npm)
- Aug 14, 2025
Malicious code in 1vta9q (npm)
- Aug 14, 2025
Malicious code in 1lkzd8 (npm)
- Aug 14, 2025
Malicious code in 1inch-p2p-sdk (npm)
- Aug 14, 2025
Malicious code in 18mr4e (npm)
- Aug 14, 2025
Malicious code in 16bit-js-vm-model (npm)
- Aug 14, 2025
Malicious code in 1337qq-js (npm)
- Aug 14, 2025
Malicious code in 12jeet2025 (npm)
- Aug 14, 2025
Malicious code in 12341241234124124124324t (npm)
- Aug 14, 2025
Malicious code in 121war-robots-free-demeter (npm)
- Aug 14, 2025
Malicious code in 121block-pattern-explorer (npm)
- Aug 14, 2025
Malicious code in 11ty-simple-page-post-creator (npm)
- Aug 14, 2025
Malicious code in 10-21-landing (npm)
- Aug 14, 2025
Malicious code in 0o1d7m (npm)
- Aug 14, 2025
Malicious code in 007007-simple-calculator (npm)
- Aug 14, 2025
Malicious code in 0-snap-score318 (npm)
- Aug 14, 2025
Malicious code in zze2 (npm)
- Aug 14, 2025
Malicious code in zzcnativeapi (npm)
- Aug 14, 2025
Malicious code in zyonite (npm)
- Aug 14, 2025
Malicious code in zygupdwvlxtbjmfk (npm)
- Aug 14, 2025
Malicious code in zycommon-web (npm)
- Aug 14, 2025
Malicious code in zxxmsbgl (npm)
- Aug 14, 2025
Malicious code in zxsfqviceptrnhyb (npm)
- Aug 14, 2025
Malicious code in zxcqweasd (npm)
- Aug 14, 2025
Malicious code in zx3rt (npm)
- Aug 14, 2025
Malicious code in zvxgithub (npm)
- Aug 14, 2025
Malicious code in zviewer (npm)
- Aug 14, 2025
Malicious code in zvcore (npm)
- Aug 14, 2025
Malicious code in zuywgxsdpkfkqban (npm)
- Aug 14, 2025
Malicious code in zulu-zs4-project (npm)
- Aug 14, 2025
Malicious code in zulu-ziggurat-3wg4 (npm)
- Aug 14, 2025
Malicious code in zulu-yankee-echo-lxbas (npm)
- Aug 14, 2025
Malicious code in zulu-xray-lzmk (npm)
- Aug 14, 2025
Malicious code in zulu-xigua-charlie-xnvvt (npm)
- Aug 14, 2025
Malicious code in zulu-x19-project (npm)
- Aug 14, 2025
Malicious code in zulu-wxu-project (npm)
- Aug 14, 2025
Malicious code in zulu-ww9-project (npm)
- Aug 14, 2025
Malicious code in zulu-wpl-project (npm)
- Aug 14, 2025
Malicious code in zulu-windmill-o3ly (npm)
- Aug 14, 2025
Malicious code in zulu-wdm-project (npm)
- Aug 14, 2025
Malicious code in zulu-ugli-jstd (npm)
- Aug 14, 2025
Malicious code in zulu-tango-bpwe (npm)
- Aug 14, 2025
Malicious code in zulu-tangerine-november-hfycq (npm)
- Aug 14, 2025
Malicious code in zulu-tangerine-date-lfkvt (npm)
- Aug 14, 2025
Malicious code in zulu-strawberry-znlg (npm)
- Aug 14, 2025
Malicious code in zulu-romeo-1gss (npm)
- Aug 14, 2025
Malicious code in zulu-raspberry-bravo-bjgpk (npm)
Page 5199 of 6,667