Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yarn_6zomo_6iwd6_moon (npm)
- Aug 14, 2025
Malicious code in yarn_34mpj_w2gm6_fountain (npm)
- Aug 14, 2025
Malicious code in yarn.lock (npm)
- Aug 14, 2025
Malicious code in yarn-y2b1g-dxb20-yew-project (npm)
- Aug 14, 2025
Malicious code in yarn-wm4ui-8zg7q-keystone-project (npm)
- Aug 14, 2025
Malicious code in yarn-vz9hb-s0fiy-prism-project (npm)
- Aug 14, 2025
Malicious code in yarn-lfou3-l8twh-vista-project (npm)
- Aug 14, 2025
Malicious code in yarn-gjk0c-ahopg-orbit-project (npm)
- Aug 14, 2025
Malicious code in yarn-frx82-ytg1p-verdure-project (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-swiper (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-react-components-ce-c (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-react-components (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-rc-slider (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-jsdoc-template (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-icons-ce-c (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-icons (npm)
- Aug 14, 2025
Malicious code in yarn-design-system-ag-grid (npm)
- Aug 14, 2025
Malicious code in yarn-design-system (npm)
- Aug 14, 2025
Malicious code in yarn-cling (npm)
- Aug 14, 2025
Malicious code in yarn-8op22-scrzd-lucid-project (npm)
- Aug 14, 2025
Malicious code in yard-zenith-gvx003-project (npm)
- Aug 14, 2025
Malicious code in yard-xerox-qpi358-project (npm)
- Aug 14, 2025
Malicious code in yard-xenon-ble658-project (npm)
- Aug 14, 2025
Malicious code in yard-willow-qyi157-project (npm)
- Aug 14, 2025
Malicious code in yard-topaz-vev495-project (npm)
- Aug 14, 2025
Malicious code in yard-sapphire-maj313-project (npm)
- Aug 14, 2025
Malicious code in yard-river-drr775-project (npm)
- Aug 14, 2025
Malicious code in yard-quill-gya502-project (npm)
- Aug 14, 2025
Malicious code in yard-jasmine-aud826-project (npm)
- Aug 14, 2025
Malicious code in yard-glacier-cok205-project (npm)
- Aug 14, 2025
Malicious code in yard-elephant-emr032-project (npm)
- Aug 14, 2025
Malicious code in yard-bonfire-ccl955-project (npm)
- Aug 14, 2025
Malicious code in yaqpbzwrtfckdlis (npm)
- Aug 14, 2025
Malicious code in yappleya (npm)
- Aug 14, 2025
Malicious code in yapgdkoqjecnrhkz (npm)
- Aug 14, 2025
Malicious code in yapaint (npm)
- Aug 14, 2025
Malicious code in yaocao-yumofa (npm)
- Aug 14, 2025
Malicious code in yaobian-shenduan-fengshui-miben (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingyijiuyiyi-erlingerlinglingwu (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingyibayier-erlingyijiuyiling (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingeryiyier-erlingererlingsan (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingeryilingsi-erlingeryilingqi (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingeryilingba-erlingeryiyiyi (npm)
- Aug 14, 2025
Malicious code in yanye-riyu-erlingerlingyiyi-erlingeryilingsan (npm)
- Aug 14, 2025
Malicious code in yanti-tomat97-breki (npm)
- Aug 14, 2025
Malicious code in yanti-saguer82-breki (npm)
- Aug 14, 2025
Malicious code in yanti-mendoan81-breki (npm)
- Aug 14, 2025
Malicious code in yanti-kue26-breki (npm)
- Aug 14, 2025
Malicious code in yanti-getas85-breki (npm)
- Aug 14, 2025
Malicious code in yanti-bika34-breki (npm)
Page 5217 of 6,667