Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yaml-module-throw-compile-gamma (npm)
- Aug 14, 2025
Malicious code in yaml-info-cache-kernel-protected (npm)
- Aug 14, 2025
Malicious code in yaml-figures-javascript-webdriver-manager (npm)
- Aug 14, 2025
Malicious code in yaml-carina-transport-concurrently (npm)
- Aug 14, 2025
Malicious code in yaml-avior-sync-csrf (npm)
- Aug 14, 2025
Malicious code in yamdrok (npm)
- Aug 14, 2025
Malicious code in yambean-volcano-gr8v (npm)
- Aug 14, 2025
Malicious code in yambean-vinegar-b1kg (npm)
- Aug 14, 2025
Malicious code in yambean-mushroom-qtt0 (npm)
- Aug 14, 2025
Malicious code in yambean-lettuce-udda (npm)
- Aug 14, 2025
Malicious code in yambean-fig-1end (npm)
- Aug 14, 2025
Malicious code in yam-zulu-quebec-ecblf (npm)
- Aug 14, 2025
Malicious code in yam-zucchini-jjne (npm)
- Aug 14, 2025
Malicious code in yam-yankee-yvpp (npm)
- Aug 14, 2025
Malicious code in yam-xray-utaz (npm)
- Aug 14, 2025
Malicious code in yam-x99-project (npm)
- Aug 14, 2025
Malicious code in yam-wsf-project (npm)
- Aug 14, 2025
Malicious code in yam-whiskey-bravo-odgrw (npm)
- Aug 14, 2025
Malicious code in yam-whiskey-banana-ccpne (npm)
- Aug 14, 2025
Malicious code in yam-wee-project (npm)
- Aug 14, 2025
Malicious code in yam-victor-xysm (npm)
- Aug 14, 2025
Malicious code in yam-vanilla-delta-ypkec (npm)
- Aug 14, 2025
Malicious code in yam-uqz-project (npm)
- Aug 14, 2025
Malicious code in yam-ugli-whiskey-xdspy (npm)
- Aug 14, 2025
Malicious code in yam-ugli-juliet-xayok (npm)
- Aug 14, 2025
Malicious code in yam-t3q-project (npm)
- Aug 14, 2025
Malicious code in yam-strawberry-hotel-swtak (npm)
- Aug 14, 2025
Malicious code in yam-strawberry-delta-ohwhr (npm)
- Aug 14, 2025
Malicious code in yam-s5i-project (npm)
- Aug 14, 2025
Malicious code in yam-ryy-project (npm)
- Aug 14, 2025
Malicious code in yam-quince-juliet-rzpul (npm)
- Aug 14, 2025
Malicious code in yam-pulsar-uct5 (npm)
- Aug 14, 2025
Malicious code in yam-oi8-project (npm)
- Aug 14, 2025
Malicious code in yam-nectarine-whqd (npm)
- Aug 14, 2025
Malicious code in yam-n11-project (npm)
- Aug 14, 2025
Malicious code in yam-myi-project (npm)
- Aug 14, 2025
Malicious code in yam-mmi-project (npm)
- Aug 14, 2025
Malicious code in yam-mike-cswv (npm)
- Aug 14, 2025
Malicious code in yam-meteor-y4re (npm)
- Aug 14, 2025
Malicious code in yam-m80-project (npm)
- Aug 14, 2025
Malicious code in yam-lima-iksj (npm)
- Aug 14, 2025
Malicious code in yam-lima-gzja (npm)
- Aug 14, 2025
Malicious code in yam-kiwi-ouqk (npm)
- Aug 14, 2025
Malicious code in yam-kiwi-lemon-ystye (npm)
- Aug 14, 2025
Malicious code in yam-juliet-wfie (npm)
- Aug 14, 2025
Malicious code in yam-inferno-9o19 (npm)
- Aug 14, 2025
Malicious code in yam-golf-foxtrot-irkji (npm)
- Aug 14, 2025
Malicious code in yam-foxtrot-yqfa (npm)
- Aug 14, 2025
Malicious code in yam-foxtrot-alpha-cuucv (npm)
- Aug 14, 2025
Malicious code in yam-fnk-project (npm)
Page 5220 of 6,667