Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zephyr-nebula-cbi154-project (npm)
- Aug 14, 2025
Malicious code in zephyr-lw4kt-z5two-boulder-project (npm)
- Aug 14, 2025
Malicious code in zephyr-kb35p-rjg59-yeti-project (npm)
- Aug 14, 2025
Malicious code in zephyr-infinity-vya854-project (npm)
- Aug 14, 2025
Malicious code in zephyr-grrtu-x7yy8-blossom-project (npm)
- Aug 14, 2025
Malicious code in zephyr-graviton-csv-bootstrap (npm)
- Aug 14, 2025
Malicious code in zephyr-fox-oya896-project (npm)
- Aug 14, 2025
Malicious code in zephyr-evergreen-fnh566-project (npm)
- Aug 14, 2025
Malicious code in zephyr-epigenetics-kuiperbelt-pulsar (npm)
- Aug 14, 2025
Malicious code in zephyr-doa40-h7phj-harp-project (npm)
- Aug 14, 2025
Malicious code in zephyr-db4io-afhh2-zenith-project (npm)
- Aug 14, 2025
Malicious code in zephyr-cascade-ytv880-project (npm)
- Aug 14, 2025
Malicious code in zephyr-brook-ftc500-project (npm)
- Aug 14, 2025
Malicious code in zephyr-blossom-iia181-project (npm)
- Aug 14, 2025
Malicious code in zephyr-9s2tr-65tu8-spark-project (npm)
- Aug 14, 2025
Malicious code in zephyr-65vvz-2wfda-comet-project (npm)
- Aug 14, 2025
Malicious code in zephyr-1rbqy-a0b5d-indigo-project (npm)
- Aug 14, 2025
Malicious code in zephyr-0fin7-q1jhw-twilight-project (npm)
- Aug 14, 2025
Malicious code in zephcms (npm)
- Aug 14, 2025
Malicious code in zenzies (npm)
- Aug 14, 2025
Malicious code in zenvjs (npm)
- Aug 14, 2025
Malicious code in zensharp (npm)
- Aug 14, 2025
Malicious code in zenobia-vortex-uranology-outercore (npm)
- Aug 14, 2025
Malicious code in zenobia-terraforming-glaciology-parallax (npm)
- Aug 14, 2025
Malicious code in zenobia-solis-aurora-gatsby (npm)
- Aug 14, 2025
Malicious code in zenobia-saturnology-antares-apex (npm)
- Aug 14, 2025
Malicious code in zenobia-regulus-non-blocking-start (npm)
- Aug 14, 2025
Malicious code in zenobia-panspermia-koa-standard (npm)
- Aug 14, 2025
Malicious code in zenith_ui3nw_r4z69_nectar (npm)
- Aug 14, 2025
Malicious code in zenith_tznpw_xixa7_zinnia (npm)
- Aug 14, 2025
Malicious code in zenith_t6n7e_pbumu_aroma (npm)
- Aug 14, 2025
Malicious code in zenith_ph9bc_e4zjs_zinnia (npm)
- Aug 14, 2025
Malicious code in zenith_jjpqq_93lmi_utopia (npm)
- Aug 14, 2025
Malicious code in zenith_b19cx_fhua2_fountain (npm)
- Aug 14, 2025
Malicious code in zenith_awgv0_1uzru_sapphire (npm)
- Aug 14, 2025
Malicious code in zenith_5bvxn_ug96c_lake (npm)
- Aug 14, 2025
Malicious code in zenith-zucchini-0q7p (npm)
- Aug 14, 2025
Malicious code in zenith-zeppelin-ctv487-project (npm)
- Aug 14, 2025
Malicious code in zenith-zeppelin-aavz (npm)
- Aug 14, 2025
Malicious code in zenith-zebra-eqp064-project (npm)
- Aug 14, 2025
Malicious code in zenith-yacht-mtz798-project (npm)
- Aug 14, 2025
Malicious code in zenith-whale-tfr763-project (npm)
- Aug 14, 2025
Malicious code in zenith-victor-x49y (npm)
- Aug 14, 2025
Malicious code in zenith-uranium-thw374-project (npm)
- Aug 14, 2025
Malicious code in zenith-uranium-thm243-project (npm)
- Aug 14, 2025
Malicious code in zenith-unicorn-xnd295-project (npm)
- Aug 14, 2025
Malicious code in zenith-umbrella-fbo692-project (npm)
- Aug 14, 2025
Malicious code in zenith-umbrella-2bt2 (npm)
- Aug 14, 2025
Malicious code in zenith-tundra-wto221-project (npm)
- Aug 14, 2025
Malicious code in zenith-teak-j8f2 (npm)
Page 5206 of 6,667