Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zul-lontong91-breki (npm)
- Aug 14, 2025
Malicious code in zul-lodeh20-breki (npm)
- Aug 14, 2025
Malicious code in zul-lepet77-kyuki (npm)
- Aug 14, 2025
Malicious code in zul-kolak35-kyuki (npm)
- Aug 14, 2025
Malicious code in zul-kacang89-breki (npm)
- Aug 14, 2025
Malicious code in zul-jengkol85-breki (npm)
- Aug 14, 2025
Malicious code in zul-bubursumsum59-breki (npm)
- Aug 14, 2025
Malicious code in zul-buburayam69-breki (npm)
- Aug 14, 2025
Malicious code in zul-buburayam25-sukiwir (npm)
- Aug 14, 2025
Malicious code in zul-brengkes100-breki (npm)
- Aug 14, 2025
Malicious code in zucchini-zulu-golf-ybxns (npm)
- Aug 14, 2025
Malicious code in zucchini-yy4-project (npm)
- Aug 14, 2025
Malicious code in zucchini-yam-hhjg (npm)
- Aug 14, 2025
Malicious code in zucchini-yam-10zy (npm)
- Aug 14, 2025
Malicious code in zucchini-y5p-project (npm)
- Aug 14, 2025
Malicious code in zucchini-xigua-kxyi (npm)
- Aug 14, 2025
Malicious code in zucchini-xenon-b523 (npm)
- Aug 14, 2025
Malicious code in zucchini-wp6-project (npm)
- Aug 14, 2025
Malicious code in zucchini-wo3-project (npm)
- Aug 14, 2025
Malicious code in zucchini-whiskey-ymxh (npm)
- Aug 14, 2025
Malicious code in zucchini-watermelon-ooxw (npm)
- Aug 14, 2025
Malicious code in zucchini-watermelon-mango-hnhoo (npm)
- Aug 14, 2025
Malicious code in zucchini-watermelon-cherry-zmnum (npm)
- Aug 14, 2025
Malicious code in zucchini-vsn-project (npm)
- Aug 14, 2025
Malicious code in zucchini-vs3-project (npm)
- Aug 14, 2025
Malicious code in zucchini-victor-xigua-rajix (npm)
- Aug 14, 2025
Malicious code in zucchini-victor-a5ql (npm)
- Aug 14, 2025
Malicious code in zucchini-vanilla-jdxt (npm)
- Aug 14, 2025
Malicious code in zucchini-uns-project (npm)
- Aug 14, 2025
Malicious code in zucchini-uniform-sierra-fgaip (npm)
- Aug 14, 2025
Malicious code in zucchini-uniform-raspberry-nhmfa (npm)
- Aug 14, 2025
Malicious code in zucchini-ugli-gwes (npm)
- Aug 14, 2025
Malicious code in zucchini-sierra-papaya-pcivf (npm)
- Aug 14, 2025
Malicious code in zucchini-romeo-papaya-hqhvp (npm)
- Aug 14, 2025
Malicious code in zucchini-romeo-etmr (npm)
- Aug 14, 2025
Malicious code in zucchini-raspberry-ujdx (npm)
- Aug 14, 2025
Malicious code in zucchini-raspberry-oimj (npm)
- Aug 14, 2025
Malicious code in zucchini-quince-grape-xpkuu (npm)
- Aug 14, 2025
Malicious code in zucchini-papaya-juliet-racim (npm)
- Aug 14, 2025
Malicious code in zucchini-oscar-logx (npm)
- Aug 14, 2025
Malicious code in zucchini-orange-ugli-mhhpt (npm)
- Aug 14, 2025
Malicious code in zucchini-nsv-project (npm)
- Aug 14, 2025
Malicious code in zucchini-lemon-juev (npm)
- Aug 14, 2025
Malicious code in zucchini-kale-7los (npm)
- Aug 14, 2025
Malicious code in zucchini-juliet-xwyo (npm)
- Aug 14, 2025
Malicious code in zucchini-india-elderberry-feook (npm)
- Aug 14, 2025
Malicious code in zucchini-icj-project (npm)
- Aug 14, 2025
Malicious code in zucchini-hotel-yam-zdqrw (npm)
- Aug 14, 2025
Malicious code in zucchini-hotel-ugli-rhnkb (npm)
- Aug 14, 2025
Malicious code in zucchini-hotel-tqaz (npm)
Page 5201 of 6,667