Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zen_rsows_0pd22_mirage (npm)
- Aug 14, 2025
Malicious code in zen_finym_m0bga_velocity (npm)
- Aug 14, 2025
Malicious code in zen_evzyv_6ueng_obsidian (npm)
- Aug 14, 2025
Malicious code in zen_ccdej_1ymkx_jasmine (npm)
- Aug 14, 2025
Malicious code in zen_4u3ri_j1fqw_flare (npm)
- Aug 14, 2025
Malicious code in zen-slse4-avqlu-fable-project (npm)
- Aug 14, 2025
Malicious code in zen-iwqvw-m49im-opal-project (npm)
- Aug 14, 2025
Malicious code in zen-a91l4-mqzxq-verdure-project (npm)
- Aug 14, 2025
Malicious code in zen-1i7nw-ivlqb-glow-project (npm)
- Aug 14, 2025
Malicious code in zen-0jp1y-0avqf-throne-project (npm)
- Aug 14, 2025
Malicious code in zeljkofilipin-malu (npm)
- Aug 14, 2025
Malicious code in zebra-zenith-eho378-project (npm)
- Aug 14, 2025
Malicious code in zebra-yellow-cry356-project (npm)
- Aug 14, 2025
Malicious code in zebra-xylophone-phm425-project (npm)
- Aug 14, 2025
Malicious code in zebra-xylophone-ers940-project (npm)
- Aug 14, 2025
Malicious code in zebra-xerox-was996-project (npm)
- Aug 14, 2025
Malicious code in zebra-whale-rch074-project (npm)
- Aug 14, 2025
Malicious code in zebra-vulture-nzw633-project (npm)
- Aug 14, 2025
Malicious code in zebra-umbrella-lri877-project (npm)
- Aug 14, 2025
Malicious code in zebra-river-scb566-project (npm)
- Aug 14, 2025
Malicious code in zebra-quill-gkk089-project (npm)
- Aug 14, 2025
Malicious code in zebra-quasar-kro505-project (npm)
- Aug 14, 2025
Malicious code in zebra-quasar-etc249-project (npm)
- Aug 14, 2025
Malicious code in zebra-quagmire-oil918-project (npm)
- Aug 14, 2025
Malicious code in zebra-peacock-viv936-project (npm)
- Aug 14, 2025
Malicious code in zebra-peacock-vdn684-project (npm)
- Aug 14, 2025
Malicious code in zebra-opal-yxm957-project (npm)
- Aug 14, 2025
Malicious code in zebra-opal-cdn571-project (npm)
- Aug 14, 2025
Malicious code in zebra-nymph-sdp274-project (npm)
- Aug 14, 2025
Malicious code in zebra-moose-vmh140-project (npm)
- Aug 14, 2025
Malicious code in zebra-leopard-pkm297-project (npm)
- Aug 14, 2025
Malicious code in zebra-leopard-gyn147-project (npm)
- Aug 14, 2025
Malicious code in zebra-koala-ahg767-project (npm)
- Aug 14, 2025
Malicious code in zebra-kelp-xzn716-project (npm)
- Aug 14, 2025
Malicious code in zebra-jasmine-plr986-project (npm)
- Aug 14, 2025
Malicious code in zebra-jacket-cww404-project (npm)
- Aug 14, 2025
Malicious code in zebra-hedgehog-hkk369-project (npm)
- Aug 14, 2025
Malicious code in zebra-everest-dot171-project (npm)
- Aug 14, 2025
Malicious code in zebra-dragon-hgs959-project (npm)
- Aug 14, 2025
Malicious code in zebra-dewdrop-wtn837-project (npm)
- Aug 14, 2025
Malicious code in zebra-cloud-chw719-project (npm)
- Aug 14, 2025
Malicious code in zebra-aroma-nrb995-project (npm)
- Aug 14, 2025
Malicious code in zeblok (npm)
- Aug 14, 2025
Malicious code in zdwifqjchrknyoux (npm)
- Aug 14, 2025
Malicious code in zdulmnbjsrwxckqt (npm)
- Aug 14, 2025
Malicious code in zdirstehkxkvjbny (npm)
- Aug 14, 2025
Malicious code in zdc-icons (npm)
- Aug 14, 2025
Malicious code in zdachboost (npm)
4 compromised versions
- Aug 14, 2025
Malicious code in zczzxxzc (npm)
- Aug 14, 2025
Malicious code in zczyrt (npm)
Page 5208 of 6,667