Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in zcgqveyhdkljitak (npm)
- Aug 14, 2025
Malicious code in zbaconpdx (npm)
- Aug 14, 2025
Malicious code in zbackup (npm)
- Aug 14, 2025
Malicious code in zaxis (npm)
- Aug 14, 2025
Malicious code in zaudio (npm)
- Aug 14, 2025
Malicious code in zarfxwlgbjmknvtd (npm)
- Aug 14, 2025
Malicious code in zapi (npm)
- Aug 14, 2025
Malicious code in zapfiles (npm)
- Aug 14, 2025
Malicious code in zap-ninja (npm)
- Aug 14, 2025
Malicious code in zany-drift-qov382-project (npm)
- Aug 14, 2025
Malicious code in zangoose (npm)
- Aug 14, 2025
Malicious code in zampara (npm)
- Aug 14, 2025
Malicious code in zamia-yearling-5tct (npm)
- Aug 14, 2025
Malicious code in zamia-volcano-hlxo (npm)
- Aug 14, 2025
Malicious code in zamia-quasar-iblz (npm)
- Aug 14, 2025
Malicious code in zamia-oscar-xvio (npm)
- Aug 14, 2025
Malicious code in zamia-helicopter-8hoz (npm)
- Aug 14, 2025
Malicious code in zamia-ginkgo-8f9e (npm)
- Aug 14, 2025
Malicious code in zamia-evergreen-c245 (npm)
- Aug 14, 2025
Malicious code in zamia-drone-ccj7 (npm)
- Aug 14, 2025
Malicious code in zamia-deciduous-3juh (npm)
- Aug 14, 2025
Malicious code in zaki-taiwan23-kyuki (npm)
- Aug 14, 2025
Malicious code in zaki-tahu20-breki (npm)
- Aug 14, 2025
Malicious code in zaki-tahu2-breki (npm)
- Aug 14, 2025
Malicious code in zaki-pisang24-kyuki (npm)
- Aug 14, 2025
Malicious code in zaki-pecel26-breki (npm)
- Aug 14, 2025
Malicious code in zaki-nasipecel33-sukiwir (npm)
- Aug 14, 2025
Malicious code in zaki-naget16-kuki (npm)
- Aug 14, 2025
Malicious code in zaki-lapis15-breki (npm)
- Aug 14, 2025
Malicious code in zaki-klipo32-kuki (npm)
- Aug 14, 2025
Malicious code in zaki-kembang5-kyuki (npm)
- Aug 14, 2025
Malicious code in zaki-gudeg81-breki (npm)
- Aug 14, 2025
Malicious code in zaki-gaplek33-sukiwir (npm)
- Aug 14, 2025
Malicious code in zaki-gandul13-kyuki (npm)
- Aug 14, 2025
Malicious code in zaki-dradag1-sukiwir (npm)
- Aug 14, 2025
Malicious code in zaki-bakwan62-sukiwir (npm)
- Aug 14, 2025
Malicious code in zajith (npm)
- Aug 14, 2025
Malicious code in zain-wajit36-sukiwir (npm)
- Aug 14, 2025
Malicious code in zain-toge68-sukiwir (npm)
- Aug 14, 2025
Malicious code in zain-toge3-kyuki (npm)
- Aug 14, 2025
Malicious code in zain-tahu10-breki (npm)
- Aug 14, 2025
Malicious code in zain-semur84-kyuki (npm)
- Aug 14, 2025
Malicious code in zain-mangga18-kyuki (npm)
- Aug 14, 2025
Malicious code in zain-kemplang76-breki (npm)
- Aug 14, 2025
Malicious code in zain-empal74-breki (npm)
- Aug 14, 2025
Malicious code in zaidxjkcyqnmvkgr (npm)
- Aug 14, 2025
Malicious code in zahirra (npm)
- Aug 14, 2025
Malicious code in zafkuvtdqnjixlpw (npm)
- Aug 14, 2025
Malicious code in zab-server (npm)
- Aug 14, 2025
Malicious code in z..z (npm)
Page 5209 of 6,667