Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zest-volcano-nclk (npm)
- Aug 14, 2025
Malicious code in zest-gorilla-x1gi (npm)
- Aug 14, 2025
Malicious code in zest-carrot-sco5 (npm)
- Aug 14, 2025
Malicious code in zero-simulate-rain-monitor-book (npm)
- Aug 14, 2025
Malicious code in zero-secure-big-user-transpile (npm)
- Aug 14, 2025
Malicious code in zero-report-benchmark-pi-scale (npm)
- Aug 14, 2025
Malicious code in zero-old-static-string-daemon (npm)
- Aug 14, 2025
Malicious code in zero-hot-long-simple-integer (npm)
- Aug 14, 2025
Malicious code in zergio (npm)
- Aug 14, 2025
Malicious code in zerber (npm)
- Aug 14, 2025
Malicious code in zeppelin-zenith-zsx845-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-zenith-apn318-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-xylophone-i2vr (npm)
- Aug 14, 2025
Malicious code in zeppelin-xerophyte-8cxj (npm)
- Aug 14, 2025
Malicious code in zeppelin-xenon-jix079-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-xenon-ewss (npm)
- Aug 14, 2025
Malicious code in zeppelin-volcano-mhe157-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-underpass-dzsc (npm)
- Aug 14, 2025
Malicious code in zeppelin-quill-gho636-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-pebble-tfb084-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-nymph-wpa677-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-nymph-bfy220-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-kiwi-wnn800-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-juniper-1e1m (npm)
- Aug 14, 2025
Malicious code in zeppelin-jacket-pci332-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-jacket-kel322-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-island-cob464-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-igloo-yzl984-project (npm)
- Aug 14, 2025
Malicious code in zeppelin-dragon-iuz288-project (npm)
- Aug 14, 2025
Malicious code in zephyr_zwow1_yb60a_driftwood (npm)
- Aug 14, 2025
Malicious code in zephyr_up67l_u4nhw_thunder (npm)
- Aug 14, 2025
Malicious code in zephyr_rujq7_bgmxt_pulse (npm)
- Aug 14, 2025
Malicious code in zephyr_rkaut_vp3da_pulse (npm)
- Aug 14, 2025
Malicious code in zephyr_rcyzt_m1htq_solstice (npm)
- Aug 14, 2025
Malicious code in zephyr_rcdso_g3joj_glow (npm)
- Aug 14, 2025
Malicious code in zephyr_7bmed_08dgj_bramble (npm)
- Aug 14, 2025
Malicious code in zephyr_5m9t9_qyzkf_plume (npm)
- Aug 14, 2025
Malicious code in zephyr_2jlfx_jkovr_pinnacle (npm)
- Aug 14, 2025
Malicious code in zephyr-zodiac-naq263-project (npm)
- Aug 14, 2025
Malicious code in zephyr-zji9o-budor-star-project (npm)
- Aug 14, 2025
Malicious code in zephyr-yeti-lmg157-project (npm)
- Aug 14, 2025
Malicious code in zephyr-xwxn6-jklof-wave-project (npm)
- Aug 14, 2025
Malicious code in zephyr-xenon-fvf058-project (npm)
- Aug 14, 2025
Malicious code in zephyr-xatnk-4f8lp-terra-project (npm)
- Aug 14, 2025
Malicious code in zephyr-violet-jfd724-project (npm)
- Aug 14, 2025
Malicious code in zephyr-uranium-pyn249-project (npm)
- Aug 14, 2025
Malicious code in zephyr-tender-tnj719-project (npm)
- Aug 14, 2025
Malicious code in zephyr-t3btm-1dwyw-drift-project (npm)
- Aug 14, 2025
Malicious code in zephyr-pb360-2vood-celestial-project (npm)
- Aug 14, 2025
Malicious code in zephyr-nodemon-comet-lepton (npm)
Page 5205 of 6,667