Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,318 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yankee-hotel-echo-vdqxd (npm)
- Aug 14, 2025
Malicious code in yankee-hotel-alpha-wrdpr (npm)
- Aug 14, 2025
Malicious code in yankee-h47-project (npm)
- Aug 14, 2025
Malicious code in yankee-grape-zulu-uiehc (npm)
- Aug 14, 2025
Malicious code in yankee-fig-bjrw (npm)
- Aug 14, 2025
Malicious code in yankee-fap-project (npm)
- Aug 14, 2025
Malicious code in yankee-elephant-oyj3 (npm)
- Aug 14, 2025
Malicious code in yankee-elderberry-rlcy (npm)
- Aug 14, 2025
Malicious code in yankee-egi-project (npm)
- Aug 14, 2025
Malicious code in yankee-echo-tkou (npm)
- Aug 14, 2025
Malicious code in yankee-dragonfruit-blby (npm)
- Aug 14, 2025
Malicious code in yankee-delta-uniform-dmngb (npm)
- Aug 14, 2025
Malicious code in yankee-date-xigua-xofow (npm)
- Aug 14, 2025
Malicious code in yankee-date-awrl (npm)
- Aug 14, 2025
Malicious code in yankee-d77-project (npm)
- Aug 14, 2025
Malicious code in yankee-charlie-aaeb (npm)
- Aug 14, 2025
Malicious code in yankee-banana-tdbh (npm)
- Aug 14, 2025
Malicious code in yankee-aq1-project (npm)
- Aug 14, 2025
Malicious code in yankee-apple-juliet-goytg (npm)
- Aug 14, 2025
Malicious code in yankee-apple-drbf (npm)
- Aug 14, 2025
Malicious code in yankee-alpha-uniform-nujwo (npm)
- Aug 14, 2025
Malicious code in yankee-alpha-gxgd (npm)
- Aug 14, 2025
Malicious code in yankee-9mr-project (npm)
- Aug 14, 2025
Malicious code in yankee-8ci-project (npm)
- Aug 14, 2025
Malicious code in yankee-81w-project (npm)
- Aug 14, 2025
Malicious code in yankee-76r-project (npm)
- Aug 14, 2025
Malicious code in yankee-6wo-project (npm)
- Aug 14, 2025
Malicious code in yankee-6g4-project (npm)
- Aug 14, 2025
Malicious code in yankee-4n3-project (npm)
- Aug 14, 2025
Malicious code in yankee-49u-project (npm)
- Aug 14, 2025
Malicious code in yankee-3iv-project (npm)
- Aug 14, 2025
Malicious code in yangkuan (npm)
- Aug 14, 2025
Malicious code in yandex-useragent (npm)
- Aug 14, 2025
Malicious code in yandex-services (npm)
- Aug 14, 2025
Malicious code in yandex-printf (npm)
- Aug 14, 2025
Malicious code in yandex-mailer (npm)
- Aug 14, 2025
Malicious code in yandex-logger (npm)
- Aug 14, 2025
Malicious code in yandex-lint-draft (npm)
- Aug 14, 2025
Malicious code in yandex-geo-utils (npm)
- Aug 14, 2025
Malicious code in yandex-environment (npm)
- Aug 14, 2025
Malicious code in yandex-config (npm)
- Aug 14, 2025
Malicious code in yandex-clck-url (npm)
- Aug 14, 2025
Malicious code in yandex-app-config (npm)
- Aug 14, 2025
Malicious code in yamsafer-ui (npm)
- Aug 14, 2025
Malicious code in yamsafer-ufo (npm)
- Aug 14, 2025
Malicious code in yamsafer-tooltip (npm)
- Aug 14, 2025
Malicious code in yamsafer-link (npm)
- Aug 14, 2025
Malicious code in yamsafer-bubble (npm)
- Aug 14, 2025
Malicious code in yammerer (npm)
- Aug 14, 2025
Malicious code in yaml-psi-tau-void-quick (npm)
Page 5219 of 6,667