Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yzrmahlocdwgsjep (npm)
- Aug 14, 2025
Malicious code in yzqdapjomkexkhbr (npm)
- Aug 14, 2025
Malicious code in yzmenu (npm)
- Aug 14, 2025
Malicious code in yyx.js (npm)
- Aug 14, 2025
Malicious code in yyipdt (npm)
- Aug 14, 2025
Malicious code in yyf-validate (npm)
- Aug 14, 2025
Malicious code in yyf-url (npm)
- Aug 14, 2025
Malicious code in yyf-reflection (npm)
- Aug 14, 2025
Malicious code in yyf-random (npm)
- Aug 14, 2025
Malicious code in yyf-private (npm)
- Aug 14, 2025
Malicious code in yyf-pool (npm)
- Aug 14, 2025
Malicious code in yyf-pipe (npm)
- Aug 14, 2025
Malicious code in yyf-log (npm)
- Aug 14, 2025
Malicious code in yyf-iterate (npm)
- Aug 14, 2025
Malicious code in yyf-http (npm)
- Aug 14, 2025
Malicious code in yyf-event (npm)
- Aug 14, 2025
Malicious code in yyf-di (npm)
- Aug 14, 2025
Malicious code in yyf-csv (npm)
- Aug 14, 2025
Malicious code in yyf-convert (npm)
- Aug 14, 2025
Malicious code in yyf-config (npm)
- Aug 14, 2025
Malicious code in yyf-components (npm)
- Aug 14, 2025
Malicious code in yyf-async (npm)
- Aug 14, 2025
Malicious code in yycting (npm)
- Aug 14, 2025
Malicious code in yyb-pangu (npm)
- Aug 14, 2025
Malicious code in yy-igwutil (npm)
- Aug 14, 2025
Malicious code in yxdvksjmpunoarit (npm)
- Aug 14, 2025
Malicious code in ywqnbpxrdazhkjme (npm)
- Aug 14, 2025
Malicious code in ywpltavzimnrhcfd (npm)
- Aug 14, 2025
Malicious code in yuzhidaoling-goutong (npm)
- Aug 14, 2025
Malicious code in yuzeming (npm)
- Aug 14, 2025
Malicious code in yurukawa (npm)
- Aug 14, 2025
Malicious code in yurt-zeppelin-tf28 (npm)
- Aug 14, 2025
Malicious code in yurt-zenith-hf3l (npm)
- Aug 14, 2025
Malicious code in yurt-xerophyte-c5ac (npm)
- Aug 14, 2025
Malicious code in yurt-wasabi-va7c (npm)
- Aug 14, 2025
Malicious code in yurt-tangerine-jhu0 (npm)
- Aug 14, 2025
Malicious code in yurt-pine-l7fp (npm)
- Aug 14, 2025
Malicious code in yurt-mushroom-8qnh (npm)
- Aug 14, 2025
Malicious code in yurt-kilo-4knh (npm)
- Aug 14, 2025
Malicious code in yurt-flare-hzzt (npm)
- Aug 14, 2025
Malicious code in yurt-alpha-vtxy (npm)
- Aug 14, 2025
Malicious code in yuqishi-qiuai-liaotian (npm)
- Aug 14, 2025
Malicious code in yupjs (npm)
- Aug 14, 2025
Malicious code in yup-latest (npm)
- Aug 14, 2025
Malicious code in yuni-moci6-breki (npm)
- Aug 14, 2025
Malicious code in yuni-jamblang42-sukiwir (npm)
- Aug 14, 2025
Malicious code in yuni-enting29-breki (npm)
- Aug 14, 2025
Malicious code in yumlist (npm)
- Aug 14, 2025
Malicious code in yuleibest (npm)
- Aug 14, 2025
Malicious code in yukiko (npm)
Page 5210 of 6,667