Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ygunoil-pro-gantt (npm)
- Aug 14, 2025
Malicious code in ygtgby (npm)
- Aug 14, 2025
Malicious code in yglacmphnbvotkrs (npm)
- Aug 14, 2025
Malicious code in ygjd41 (npm)
- Aug 14, 2025
Malicious code in yghios (npm)
- Aug 14, 2025
Malicious code in yfsoncivjqgeurlb (npm)
- Aug 14, 2025
Malicious code in yfm-transform (npm)
- Aug 14, 2025
Malicious code in yext (npm)
- Aug 14, 2025
Malicious code in yew_ym5uv_k18kk_solstice (npm)
- Aug 14, 2025
Malicious code in yew_xmrdr_7vsu0_glow (npm)
- Aug 14, 2025
Malicious code in yew_cqxq9_1m4lc_snow (npm)
- Aug 14, 2025
Malicious code in yew_a4ijv_syt0j_kale (npm)
- Aug 14, 2025
Malicious code in yew-parsnip-vzie (npm)
- Aug 14, 2025
Malicious code in yew-parsnip-5uj2 (npm)
- Aug 14, 2025
Malicious code in yew-ntl07-6kz99-emerald-project (npm)
- Aug 14, 2025
Malicious code in yew-n31yx-vve74-grove-project (npm)
- Aug 14, 2025
Malicious code in yew-mbd6w-d8jgw-ocean-project (npm)
- Aug 14, 2025
Malicious code in yew-lion-prhl (npm)
- Aug 14, 2025
Malicious code in yew-jungle-w8ke (npm)
- Aug 14, 2025
Malicious code in yew-2l9po-84oxx-ripple-project (npm)
- Aug 14, 2025
Malicious code in yeti-yonder-ssy506-project (npm)
- Aug 14, 2025
Malicious code in yeti-yellow-dah398-project (npm)
- Aug 14, 2025
Malicious code in yeti-yawn-tuu230-project (npm)
- Aug 14, 2025
Malicious code in yeti-xj9id-t33hg-juniper-project (npm)
- Aug 14, 2025
Malicious code in yeti-xerox-afe759-project (npm)
- Aug 14, 2025
Malicious code in yeti-wisp-oyb043-project (npm)
- Aug 14, 2025
Malicious code in yeti-wave-wtx381-project (npm)
- Aug 14, 2025
Malicious code in yeti-tide-whe735-project (npm)
- Aug 14, 2025
Malicious code in yeti-reef-sku061-project (npm)
- Aug 14, 2025
Malicious code in yeti-orchid-izc173-project (npm)
- Aug 14, 2025
Malicious code in yeti-opal-fxf548-project (npm)
- Aug 14, 2025
Malicious code in yeti-nectar-cny089-project (npm)
- Aug 14, 2025
Malicious code in yeti-mountain-jzv065-project (npm)
- Aug 14, 2025
Malicious code in yeti-moon-lyf042-project (npm)
- Aug 14, 2025
Malicious code in yeti-i22dp-5h44y-ripple-project (npm)
- Aug 14, 2025
Malicious code in yeti-hammock-zdd498-project (npm)
- Aug 14, 2025
Malicious code in yeti-h4tdi-iaf6v-uplift-project (npm)
- Aug 14, 2025
Malicious code in yeti-galaxy-adw756-project (npm)
- Aug 14, 2025
Malicious code in yeti-fjord-ess486-project (npm)
- Aug 14, 2025
Malicious code in yeti-delta-cfj239-project (npm)
- Aug 14, 2025
Malicious code in yeti-br9u4-hfery-ivy-project (npm)
- Aug 14, 2025
Malicious code in yeti-amber-ugd443-project (npm)
- Aug 14, 2025
Malicious code in yet-another-bmp280 (npm)
- Aug 14, 2025
Malicious code in yestattoo (npm)
- Aug 14, 2025
Malicious code in yeshas (npm)
- Aug 14, 2025
Malicious code in yepiaoran-daliuren-jiangyi-zhong (npm)
- Aug 14, 2025
Malicious code in yeoman-genrator (npm)
- Aug 14, 2025
Malicious code in yelpxonjon (npm)
- Aug 14, 2025
Malicious code in yelpxon (npm)
- Aug 14, 2025
Malicious code in yelpplay (npm)
Page 5214 of 6,667