Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yansch (npm)
- Aug 14, 2025
Malicious code in yankee-zucchini-jufv (npm)
- Aug 14, 2025
Malicious code in yankee-zucchini-azfh (npm)
- Aug 14, 2025
Malicious code in yankee-zgn-project (npm)
- Aug 14, 2025
Malicious code in yankee-z5m-project (npm)
- Aug 14, 2025
Malicious code in yankee-yam-jmmg (npm)
- Aug 14, 2025
Malicious code in yankee-yab-project (npm)
- Aug 14, 2025
Malicious code in yankee-xray-charlie-ejhsb (npm)
- Aug 14, 2025
Malicious code in yankee-xigua-hotel-uqaqh (npm)
- Aug 14, 2025
Malicious code in yankee-xigua-elderberry-sfymn (npm)
- Aug 14, 2025
Malicious code in yankee-xg4-project (npm)
- Aug 14, 2025
Malicious code in yankee-wv6-project (npm)
- Aug 14, 2025
Malicious code in yankee-whiskey-vanilla-wtpvp (npm)
- Aug 14, 2025
Malicious code in yankee-watermelon-6kym (npm)
- Aug 14, 2025
Malicious code in yankee-wasabi-1zkj (npm)
- Aug 14, 2025
Malicious code in yankee-vxg-project (npm)
- Aug 14, 2025
Malicious code in yankee-vll-project (npm)
- Aug 14, 2025
Malicious code in yankee-vinegar-emjj (npm)
- Aug 14, 2025
Malicious code in yankee-vanilla-bple (npm)
- Aug 14, 2025
Malicious code in yankee-v61-project (npm)
- Aug 14, 2025
Malicious code in yankee-urj-project (npm)
- Aug 14, 2025
Malicious code in yankee-uniform-ruql (npm)
- Aug 14, 2025
Malicious code in yankee-uniform-njai (npm)
- Aug 14, 2025
Malicious code in yankee-ugli-vfmj (npm)
- Aug 14, 2025
Malicious code in yankee-ugli-tangerine-jgxst (npm)
- Aug 14, 2025
Malicious code in yankee-ugli-kiwi-nkhzi (npm)
- Aug 14, 2025
Malicious code in yankee-tornado-fnea (npm)
- Aug 14, 2025
Malicious code in yankee-tb0-project (npm)
- Aug 14, 2025
Malicious code in yankee-tangerine-awgi (npm)
- Aug 14, 2025
Malicious code in yankee-sierra-vpta (npm)
- Aug 14, 2025
Malicious code in yankee-quebec-november-odtlg (npm)
- Aug 14, 2025
Malicious code in yankee-quebec-mike-qprnm (npm)
- Aug 14, 2025
Malicious code in yankee-pgx-project (npm)
- Aug 14, 2025
Malicious code in yankee-papaya-oscar-segzh (npm)
- Aug 14, 2025
Malicious code in yankee-papa-jceu (npm)
- Aug 14, 2025
Malicious code in yankee-oregano-ec3b (npm)
- Aug 14, 2025
Malicious code in yankee-okq-project (npm)
- Aug 14, 2025
Malicious code in yankee-nt2-project (npm)
- Aug 14, 2025
Malicious code in yankee-november-nectarine-mfokr (npm)
- Aug 14, 2025
Malicious code in yankee-november-fqyb (npm)
- Aug 14, 2025
Malicious code in yankee-nightingale-gh1e (npm)
- Aug 14, 2025
Malicious code in yankee-nectarine-yobx (npm)
- Aug 14, 2025
Malicious code in yankee-mountain-nylp (npm)
- Aug 14, 2025
Malicious code in yankee-mango-november-upvqr (npm)
- Aug 14, 2025
Malicious code in yankee-lunar-ru35 (npm)
- Aug 14, 2025
Malicious code in yankee-lima-nectarine-hvchb (npm)
- Aug 14, 2025
Malicious code in yankee-lemon-lima-jjcbj (npm)
- Aug 14, 2025
Malicious code in yankee-india-kiwi-hrfkd (npm)
- Aug 14, 2025
Malicious code in yankee-india-grape-qsuav (npm)
- Aug 14, 2025
Malicious code in yankee-iiu-project (npm)
Page 5218 of 6,667