Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,322 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yonder_szvw5_xuzh2_yacht (npm)
- Aug 14, 2025
Malicious code in yonder_izkpu_urrvc_quicksilver (npm)
- Aug 14, 2025
Malicious code in yonder_heoen_eezq2_quasar (npm)
- Aug 14, 2025
Malicious code in yonder_h6nzb_t3a48_zenith (npm)
- Aug 14, 2025
Malicious code in yonder_bw6v3_zc2n3_yarrow (npm)
- Aug 14, 2025
Malicious code in yonder_bemcz_zddfh_saffron (npm)
- Aug 14, 2025
Malicious code in yonder-zephyr-xbb066-project (npm)
- Aug 14, 2025
Malicious code in yonder-xp21c-59wvv-horizon-project (npm)
- Aug 14, 2025
Malicious code in yonder-vtx25-6zrj6-fable-project (npm)
- Aug 14, 2025
Malicious code in yonder-uranium-tez166-project (npm)
- Aug 14, 2025
Malicious code in yonder-tulip-mge951-project (npm)
- Aug 14, 2025
Malicious code in yonder-repository-sirius-whitedwarf (npm)
- Aug 14, 2025
Malicious code in yonder-r8wm2-inr2f-pinnacle-project (npm)
- Aug 14, 2025
Malicious code in yonder-p5mmd-x5dco-lucid-project (npm)
- Aug 14, 2025
Malicious code in yonder-opal-ilc080-project (npm)
- Aug 14, 2025
Malicious code in yonder-o608q-2qztm-haven-project (npm)
- Aug 14, 2025
Malicious code in yonder-o5g1b-i4zgx-frost-project (npm)
- Aug 14, 2025
Malicious code in yonder-nwifg-zpw0v-birch-project (npm)
- Aug 14, 2025
Malicious code in yonder-meadow-ivp239-project (npm)
- Aug 14, 2025
Malicious code in yonder-lw6pd-3rlyj-zen-project (npm)
- Aug 14, 2025
Malicious code in yonder-kelp-vbl109-project (npm)
- Aug 14, 2025
Malicious code in yonder-jewjh-p5y10-pearl-project (npm)
- Aug 14, 2025
Malicious code in yonder-gammarayburst-luna-fornax (npm)
- Aug 14, 2025
Malicious code in yonder-fox-kwk428-project (npm)
- Aug 14, 2025
Malicious code in yonder-falcon-ztq069-project (npm)
- Aug 14, 2025
Malicious code in yonder-emerald-qck740-project (npm)
- Aug 14, 2025
Malicious code in yonder-duuey-51lci-tempest-project (npm)
- Aug 14, 2025
Malicious code in yonder-cascade-djg019-project (npm)
- Aug 14, 2025
Malicious code in yonder-bunyan-commitlint-config-angular-child-process (npm)
- Aug 14, 2025
Malicious code in yonder-6pyvy-4w3k9-whisper-project (npm)
- Aug 14, 2025
Malicious code in yonder-35awi-4hhep-ripple-project (npm)
- Aug 14, 2025
Malicious code in yonder-1izer-ebgar-xenith-project (npm)
- Aug 14, 2025
Malicious code in yomoyu (npm)
- Aug 14, 2025
Malicious code in yolk-uplift-cln277-project (npm)
- Aug 14, 2025
Malicious code in yolhtqsbucdmraew (npm)
- Aug 14, 2025
Malicious code in yogcla (npm)
- Aug 14, 2025
Malicious code in yoeman-generator (npm)
- Aug 14, 2025
Malicious code in yoda-ux (npm)
- Aug 14, 2025
Malicious code in yobi-models (npm)
- Aug 14, 2025
Malicious code in ynvgpfkeaswmdtbz (npm)
- Aug 14, 2025
Malicious code in ynt45 (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_ysar (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_yahoo_intl (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_tracking (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_monitor (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_mobilecatalog (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_metric (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_gzip (npm)
- Aug 14, 2025
Malicious code in ynodejs_mod_geotargeting (npm)
- Aug 14, 2025
Malicious code in ynodejs_i13n (npm)
Page 5212 of 6,667