Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yelpjon (npm)
- Aug 14, 2025
Malicious code in yelphelp (npm)
- Aug 14, 2025
Malicious code in yelpbek (npm)
- Aug 14, 2025
Malicious code in yelp_sitrep (npm)
- Aug 14, 2025
Malicious code in yelp_search_suggest (npm)
- Aug 14, 2025
Malicious code in yelp_google_analytics (npm)
- Aug 14, 2025
Malicious code in yelp-style-utils (npm)
- Aug 14, 2025
Malicious code in yelp-schema-design (npm)
- Aug 14, 2025
Malicious code in yelp-react-component-typography (npm)
- Aug 14, 2025
Malicious code in yelp-react-component-tooltip (npm)
- Aug 14, 2025
Malicious code in yelp-react-component-button (npm)
- Aug 14, 2025
Malicious code in yelp-js-infra (npm)
- Aug 14, 2025
Malicious code in yelp-bunsen-logger-js (npm)
- Aug 14, 2025
Malicious code in yelp-biz-perf-utils (npm)
- Aug 14, 2025
Malicious code in yellow_wj9am_rgchu_bluebird (npm)
- Aug 14, 2025
Malicious code in yellow_rfc28_az4zl_island (npm)
- Aug 14, 2025
Malicious code in yellow_k0y8j_xyhaq_jungle (npm)
- Aug 14, 2025
Malicious code in yellow_forwh_e8xsn_velocity (npm)
- Aug 14, 2025
Malicious code in yellow_bcysk_dzghg_joy (npm)
- Aug 14, 2025
Malicious code in yellow_4xeq2_u4gch_dawn (npm)
- Aug 14, 2025
Malicious code in yellow-zxw8v-jbb9z-verdure-project (npm)
- Aug 14, 2025
Malicious code in yellow-zebra-kwk334-project (npm)
- Aug 14, 2025
Malicious code in yellow-xylophone-vjd223-project (npm)
- Aug 14, 2025
Malicious code in yellow-xdiph-b7oav-zephyr-project (npm)
- Aug 14, 2025
Malicious code in yellow-violet-hgt811-project (npm)
- Aug 14, 2025
Malicious code in yellow-spruce-zyn931-project (npm)
- Aug 14, 2025
Malicious code in yellow-opal-gxh785-project (npm)
- Aug 14, 2025
Malicious code in yellow-opal-eiv573-project (npm)
- Aug 14, 2025
Malicious code in yellow-leopard-rve815-project (npm)
- Aug 14, 2025
Malicious code in yellow-lagoon-wnb610-project (npm)
- Aug 14, 2025
Malicious code in yellow-jade-jtb741-project (npm)
- Aug 14, 2025
Malicious code in yellow-glade-sgx097-project (npm)
- Aug 14, 2025
Malicious code in yellow-glacier-zej889-project (npm)
- Aug 14, 2025
Malicious code in yellow-forest-dcl954-project (npm)
- Aug 14, 2025
Malicious code in yellow-fjord-fki281-project (npm)
- Aug 14, 2025
Malicious code in yellow-dragon-ekq819-project (npm)
- Aug 14, 2025
Malicious code in yellow-dove-bfc815-project (npm)
- Aug 14, 2025
Malicious code in yellow-4gc0j-stham-wander-project (npm)
- Aug 14, 2025
Malicious code in yellocafe (npm)
- Aug 14, 2025
Malicious code in yellio (npm)
- Aug 14, 2025
Malicious code in yeli-xinlixue (npm)
- Aug 14, 2025
Malicious code in yecuahjqzkxliwgb (npm)
- Aug 14, 2025
Malicious code in yearning-verdant-jbs005-project (npm)
- Aug 14, 2025
Malicious code in yearning-uplift-vgv274-project (npm)
- Aug 14, 2025
Malicious code in yearn-illume-hpg276-project (npm)
- Aug 14, 2025
Malicious code in yearling-violet-aq0c (npm)
- Aug 14, 2025
Malicious code in yearling-spinach-0lfw (npm)
- Aug 14, 2025
Malicious code in yearling-jalapeno-67dy (npm)
- Aug 14, 2025
Malicious code in yearling-ivy-ekiv (npm)
- Aug 14, 2025
Malicious code in yearling-fig-9r5t (npm)
Page 5215 of 6,667