Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yearling-comet-z70q (npm)
- Aug 14, 2025
Malicious code in yearling-bicycle-vpx5 (npm)
- Aug 14, 2025
Malicious code in ydtviguxcqwprkfk (npm)
- Aug 14, 2025
Malicious code in ycsrgmnhfiuqpwoj (npm)
- Aug 14, 2025
Malicious code in yckfpjimxeuqrszh (npm)
- Aug 14, 2025
Malicious code in yc0qdv (npm)
- Aug 14, 2025
Malicious code in yboxkcpflwegiamu (npm)
- Aug 14, 2025
Malicious code in ybhi7x (npm)
- Aug 14, 2025
Malicious code in ybfivwkszklagxum (npm)
- Aug 14, 2025
Malicious code in ybar (npm)
- Aug 14, 2025
Malicious code in yaysay (npm)
- Aug 14, 2025
Malicious code in yaxis (npm)
- Aug 14, 2025
Malicious code in yawn-xerus-een656-project (npm)
- Aug 14, 2025
Malicious code in yawn-whale-cli836-project (npm)
- Aug 14, 2025
Malicious code in yawn-vista-xjn856-project (npm)
- Aug 14, 2025
Malicious code in yawn-vista-fji736-project (npm)
- Aug 14, 2025
Malicious code in yawn-tundra-kiy029-project (npm)
- Aug 14, 2025
Malicious code in yawn-thunder-vsg493-project (npm)
- Aug 14, 2025
Malicious code in yawn-swan-yjs673-project (npm)
- Aug 14, 2025
Malicious code in yawn-pinnacle-nde669-project (npm)
- Aug 14, 2025
Malicious code in yawn-peony-fnd488-project (npm)
- Aug 14, 2025
Malicious code in yawn-orangutan-apt622-project (npm)
- Aug 14, 2025
Malicious code in yawn-octopus-vuz161-project (npm)
- Aug 14, 2025
Malicious code in yawn-nature-jri757-project (npm)
- Aug 14, 2025
Malicious code in yawn-jellyfish-zof191-project (npm)
- Aug 14, 2025
Malicious code in yawn-falcon-cpl450-project (npm)
- Aug 14, 2025
Malicious code in yawn-dandelion-ppb506-project (npm)
- Aug 14, 2025
Malicious code in yawn-cloud-llq147-project (npm)
- Aug 14, 2025
Malicious code in yawn-caravan-ybw965-project (npm)
- Aug 14, 2025
Malicious code in yawn-bonfire-raf904-project (npm)
- Aug 14, 2025
Malicious code in yavovo (npm)
- Aug 14, 2025
Malicious code in yauser (npm)
- Aug 14, 2025
Malicious code in yausbir (npm)
- Aug 14, 2025
Malicious code in yasmkit (npm)
- Aug 14, 2025
Malicious code in yaslouhmixzqpvkd (npm)
- Aug 14, 2025
Malicious code in yaslcxmozepvthiw (npm)
- Aug 14, 2025
Malicious code in yashovenu (npm)
- Aug 14, 2025
Malicious code in yasexml (npm)
- Aug 14, 2025
Malicious code in yarrow_xs4fk_qvueg_jade (npm)
- Aug 14, 2025
Malicious code in yarrow_kz9d8_1a1uw_verdant (npm)
- Aug 14, 2025
Malicious code in yarrow-zenith-vkd694-project (npm)
- Aug 14, 2025
Malicious code in yarrow-z6anx-j6f03-lunar-project (npm)
- Aug 14, 2025
Malicious code in yarrow-y3bv4-4ki82-unity-project (npm)
- Aug 14, 2025
Malicious code in yarrow-xxu9p-9b3bx-valley-project (npm)
- Aug 14, 2025
Malicious code in yarrow-ge4ow-r5e2a-solace-project (npm)
- Aug 14, 2025
Malicious code in yarrow-e9r8h-iwvi4-yonder-project (npm)
- Aug 14, 2025
Malicious code in yarrow-e0xwg-4aewz-terra-project (npm)
- Aug 14, 2025
Malicious code in yarrow-6dfe0-jibm7-frost-project (npm)
- Aug 14, 2025
Malicious code in yarn_z3iz0_wfi9x_iris (npm)
- Aug 14, 2025
Malicious code in yarn_brb32_icind_echo (npm)
Page 5216 of 6,667