Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zulu-quince-yety (npm)
- Aug 14, 2025
Malicious code in zulu-qhf-project (npm)
- Aug 14, 2025
Malicious code in zulu-pfu-project (npm)
- Aug 14, 2025
Malicious code in zulu-papa-vahq (npm)
- Aug 14, 2025
Malicious code in zulu-papa-fyok (npm)
- Aug 14, 2025
Malicious code in zulu-p9j-project (npm)
- Aug 14, 2025
Malicious code in zulu-orbit-0xhs (npm)
- Aug 14, 2025
Malicious code in zulu-nsh-project (npm)
- Aug 14, 2025
Malicious code in zulu-november-enne (npm)
- Aug 14, 2025
Malicious code in zulu-ngu-project (npm)
- Aug 14, 2025
Malicious code in zulu-mvj-project (npm)
- Aug 14, 2025
Malicious code in zulu-mike-xcsf (npm)
- Aug 14, 2025
Malicious code in zulu-mike-vqqc (npm)
- Aug 14, 2025
Malicious code in zulu-lemon-dpbn (npm)
- Aug 14, 2025
Malicious code in zulu-kilo-papaya-rpzkr (npm)
- Aug 14, 2025
Malicious code in zulu-kcw-project (npm)
- Aug 14, 2025
Malicious code in zulu-juliet-vzkv (npm)
- Aug 14, 2025
Malicious code in zulu-india-oxkj (npm)
- Aug 14, 2025
Malicious code in zulu-ib4-project (npm)
- Aug 14, 2025
Malicious code in zulu-hzp-project (npm)
- Aug 14, 2025
Malicious code in zulu-hotel-lima-clmdt (npm)
- Aug 14, 2025
Malicious code in zulu-hio-project (npm)
- Aug 14, 2025
Malicious code in zulu-grape-quince-pawww (npm)
- Aug 14, 2025
Malicious code in zulu-foxtrot-vtdg (npm)
- Aug 14, 2025
Malicious code in zulu-fig-whiskey-mnrxu (npm)
- Aug 14, 2025
Malicious code in zulu-fig-ugli-jyztv (npm)
- Aug 14, 2025
Malicious code in zulu-elderberry-ngzb (npm)
- Aug 14, 2025
Malicious code in zulu-elderberry-awzq (npm)
- Aug 14, 2025
Malicious code in zulu-delta-raspberry-fusje (npm)
- Aug 14, 2025
Malicious code in zulu-cyh-project (npm)
- Aug 14, 2025
Malicious code in zulu-cherry-tango-qyuzg (npm)
- Aug 14, 2025
Malicious code in zulu-beetroot-yovl (npm)
- Aug 14, 2025
Malicious code in zulu-banana-lemon-bhekq (npm)
- Aug 14, 2025
Malicious code in zulu-banana-cybl (npm)
- Aug 14, 2025
Malicious code in zulu-alpha-aivw (npm)
- Aug 14, 2025
Malicious code in zulu-a1c-project (npm)
- Aug 14, 2025
Malicious code in zulu-8tp-project (npm)
- Aug 14, 2025
Malicious code in zulu-8nd-project (npm)
- Aug 14, 2025
Malicious code in zulu-7zv-project (npm)
- Aug 14, 2025
Malicious code in zulu-6td-project (npm)
- Aug 14, 2025
Malicious code in zulu-493-project (npm)
- Aug 14, 2025
Malicious code in zulu-3vv-project (npm)
- Aug 14, 2025
Malicious code in zulu-3gn-project (npm)
- Aug 14, 2025
Malicious code in zul-telurtahu13-breki (npm)
- Aug 14, 2025
Malicious code in zul-tek26-sukiwir (npm)
- Aug 14, 2025
Malicious code in zul-tahutek83-sukiwir (npm)
- Aug 14, 2025
Malicious code in zul-sroto72-kyuki (npm)
- Aug 14, 2025
Malicious code in zul-semur41-breki (npm)
- Aug 14, 2025
Malicious code in zul-sate11-sukiwir (npm)
- Aug 14, 2025
Malicious code in zul-sambel54-sukiwir (npm)
Page 5200 of 6,667