Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yuizhou (npm)
- Aug 14, 2025
Malicious code in yuilib-css (npm)
- Aug 14, 2025
Malicious code in yufjaimhswlbknzx (npm)
- Aug 14, 2025
Malicious code in yuerec (npm)
- Aug 14, 2025
Malicious code in yuehui-miji (npm)
- Aug 14, 2025
Malicious code in yuehui-jinshu (npm)
- Aug 14, 2025
Malicious code in yuchengdaoren-fashu-qimen (npm)
- Aug 14, 2025
Malicious code in yucca-zebra-rts346-project (npm)
- Aug 14, 2025
Malicious code in yucca-yonder-gvs577-project (npm)
- Aug 14, 2025
Malicious code in yucca-xanadu-qfj223-project (npm)
- Aug 14, 2025
Malicious code in yucca-thistle-udz102-project (npm)
- Aug 14, 2025
Malicious code in yucca-sapphire-qci718-project (npm)
- Aug 14, 2025
Malicious code in yucca-pebble-lob084-project (npm)
- Aug 14, 2025
Malicious code in yucca-iceberg-emk089-project (npm)
- Aug 14, 2025
Malicious code in yucca-gorilla-dei286-project (npm)
- Aug 14, 2025
Malicious code in yucca-fox-xey091-project (npm)
- Aug 14, 2025
Malicious code in yucca-falcon-eto835-project (npm)
- Aug 14, 2025
Malicious code in yucca-cascade-lip026-project (npm)
- Aug 14, 2025
Malicious code in yucca-amber-bto216-project (npm)
- Aug 14, 2025
Malicious code in yubiauth (npm)
- Aug 14, 2025
Malicious code in yuanideas (npm)
- Aug 14, 2025
Malicious code in ytzcehqmiupxknwg (npm)
- Aug 14, 2025
Malicious code in yt-player-angular-v9 (npm)
- Aug 14, 2025
Malicious code in yskprvwjglcaizfm (npm)
- Aug 14, 2025
Malicious code in yscriptsg (npm)
- Aug 14, 2025
Malicious code in ysb-ui-libraries (npm)
- Aug 14, 2025
Malicious code in ysb-ui-elements (npm)
- Aug 14, 2025
Malicious code in ysayyzos (npm)
- Aug 14, 2025
Malicious code in yrlozphwdjueabxi (npm)
- Aug 14, 2025
Malicious code in yrkebgkzfamxwhqd (npm)
- Aug 14, 2025
Malicious code in yqsduvkzbpcienfg (npm)
- Aug 14, 2025
Malicious code in yqoaih (npm)
- Aug 14, 2025
Malicious code in yqnjzkwvraxochbl (npm)
- Aug 14, 2025
Malicious code in yqlmock (npm)
- Aug 14, 2025
Malicious code in yptdxkfemvnuihbs (npm)
- Aug 14, 2025
Malicious code in ypfgtuajqirmzndb (npm)
- Aug 14, 2025
Malicious code in youvider (npm)
- Aug 14, 2025
Malicious code in yourwaifu (npm)
- Aug 14, 2025
Malicious code in yourstory (npm)
- Aug 14, 2025
Malicious code in young-yoga-tjx528-project (npm)
- Aug 14, 2025
Malicious code in youmeng (npm)
- Aug 14, 2025
Malicious code in youjian-zhimi (npm)
- Aug 14, 2025
Malicious code in youbeegoo (npm)
- Aug 14, 2025
Malicious code in yotacast (npm)
- Aug 14, 2025
Malicious code in yosino (npm)
- Aug 14, 2025
Malicious code in yosemite_frd56_ppkt3_limestone (npm)
- Aug 14, 2025
Malicious code in yosemite_e1pr7_nx6s5_sanctuary (npm)
- Aug 14, 2025
Malicious code in yosemite_d9jqi_53uar_oasis (npm)
- Aug 14, 2025
Malicious code in yosemite_4w7j5_d7cke_infinity (npm)
- Aug 14, 2025
Malicious code in yongyujia-liaoyu-chuangshang (npm)
Page 5211 of 6,667