Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yam-elderberry-fig-jairj (npm)
- Aug 14, 2025
Malicious code in yam-echo-zzfo (npm)
- Aug 14, 2025
Malicious code in yam-delta-ufgk (npm)
- Aug 14, 2025
Malicious code in yam-delta-ivqo (npm)
- Aug 14, 2025
Malicious code in yam-date-juliet-scgxn (npm)
- Aug 14, 2025
Malicious code in yam-cherry-ugli-uanpi (npm)
- Aug 14, 2025
Malicious code in yam-cherry-qdud (npm)
- Aug 14, 2025
Malicious code in yam-cherry-lfhb (npm)
- Aug 14, 2025
Malicious code in yam-cherry-hzqy (npm)
- Aug 14, 2025
Malicious code in yam-bravo-hotel-xfqlc (npm)
- Aug 14, 2025
Malicious code in yam-b3m-project (npm)
- Aug 14, 2025
Malicious code in yam-aon-project (npm)
- Aug 14, 2025
Malicious code in yam-alpha-qwjo (npm)
- Aug 14, 2025
Malicious code in yam-alpha-echo-xqtph (npm)
- Aug 14, 2025
Malicious code in yam-8b9-project (npm)
- Aug 14, 2025
Malicious code in yam-6dm-project (npm)
- Aug 14, 2025
Malicious code in yam-4st-project (npm)
- Aug 14, 2025
Malicious code in yam-457-project (npm)
- Aug 14, 2025
Malicious code in yam-2dr-project (npm)
- Aug 14, 2025
Malicious code in yam-07i-project (npm)
- Aug 14, 2025
Malicious code in yakutsk-xanthus-robotics-css-loader (npm)
- Aug 14, 2025
Malicious code in yakutsk-robotics-pyxis-areology (npm)
- Aug 14, 2025
Malicious code in yakutsk-pyxis-polaris-koa (npm)
- Aug 14, 2025
Malicious code in yakutsk-protractor-vuetify-less-loader (npm)
- Aug 14, 2025
Malicious code in yakutsk-nightwatch-chai-child-process (npm)
- Aug 14, 2025
Malicious code in yakutsk-express-pm2-cressida (npm)
- Aug 14, 2025
Malicious code in yak-waterfall-qpn898-project (npm)
- Aug 14, 2025
Malicious code in yak-undertow-pzf309-project (npm)
- Aug 14, 2025
Malicious code in yak-topaz-plv957-project (npm)
- Aug 14, 2025
Malicious code in yak-river-iga711-project (npm)
- Aug 14, 2025
Malicious code in yak-quasar-puh795-project (npm)
- Aug 14, 2025
Malicious code in yak-penguin-hkj763-project (npm)
- Aug 14, 2025
Malicious code in yak-orchid-uat682-project (npm)
- Aug 14, 2025
Malicious code in yak-opaline-wmr818-project (npm)
- Aug 14, 2025
Malicious code in yak-octopus-ylh814-project (npm)
- Aug 14, 2025
Malicious code in yak-jade-ucm281-project (npm)
- Aug 14, 2025
Malicious code in yak-falcon-uoh580-project (npm)
- Aug 14, 2025
Malicious code in yak-cascade-yzf735-project (npm)
- Aug 14, 2025
Malicious code in yak-cascade-ccp574-project (npm)
- Aug 14, 2025
Malicious code in yak-bamboo-bcs618-project (npm)
- Aug 14, 2025
Malicious code in yak-amber-nea697-project (npm)
- Aug 14, 2025
Malicious code in yadi-bin (npm)
- Aug 14, 2025
Malicious code in yacyoa (npm)
- Aug 14, 2025
Malicious code in yacomas (npm)
- Aug 14, 2025
Malicious code in yacht_je43r_aqbm2_trill (npm)
- Aug 14, 2025
Malicious code in yacht_fh57r_gi1jc_quartz (npm)
- Aug 14, 2025
Malicious code in yacht_ayjnp_1apa4_vantage (npm)
- Aug 14, 2025
Malicious code in yacht_88ptl_7slhg_boulder (npm)
- Aug 14, 2025
Malicious code in yacht_7be9t_awqs8_illusion (npm)
- Aug 14, 2025
Malicious code in yacht_0stu5_ugmpn_citadel (npm)
Page 5221 of 6,667