Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in yacht-yambean-a65t (npm)
- Aug 14, 2025
Malicious code in yacht-whale-bjd812-project (npm)
- Aug 14, 2025
Malicious code in yacht-tango-v3mw (npm)
- Aug 14, 2025
Malicious code in yacht-saturn-uft758-project (npm)
- Aug 14, 2025
Malicious code in yacht-river-wbk607-project (npm)
- Aug 14, 2025
Malicious code in yacht-nocturne-wca859-project (npm)
- Aug 14, 2025
Malicious code in yacht-moose-gkg530-project (npm)
- Aug 14, 2025
Malicious code in yacht-lightning-jov411-project (npm)
- Aug 14, 2025
Malicious code in yacht-kite-mwh160-project (npm)
- Aug 14, 2025
Malicious code in yacht-horizon-quk755-project (npm)
- Aug 14, 2025
Malicious code in yacht-hedgehog-jcp134-project (npm)
- Aug 14, 2025
Malicious code in yacht-fox-xno742-project (npm)
- Aug 14, 2025
Malicious code in yacht-eagle-lql819-project (npm)
- Aug 14, 2025
Malicious code in yacht-charlie-rlce (npm)
- Aug 14, 2025
Malicious code in yabunker (npm)
- Aug 14, 2025
Malicious code in yabs-react-components (npm)
- Aug 14, 2025
Malicious code in y-team-header (npm)
- Aug 14, 2025
Malicious code in xysajgdnepotuvbf (npm)
- Aug 14, 2025
Malicious code in xynwpdofakiethuk (npm)
- Aug 14, 2025
Malicious code in xylophone_zswsq_9j6sb_glow (npm)
- Aug 14, 2025
Malicious code in xylophone_z93v4_gkhef_yellow (npm)
- Aug 14, 2025
Malicious code in xylophone_puqbp_0nukm_bloom (npm)
- Aug 14, 2025
Malicious code in xylophone_ik4ia_4fhjo_xenolith (npm)
- Aug 14, 2025
Malicious code in xylophone_iels5_zuvq4_valley (npm)
- Aug 14, 2025
Malicious code in xylophone_bmi4n_80ln0_paradise (npm)
- Aug 14, 2025
Malicious code in xylophone_5mosz_hfldw_xenon (npm)
- Aug 14, 2025
Malicious code in xylophone_4t1l4_q1cxh_wave (npm)
- Aug 14, 2025
Malicious code in xylophone_2xu3j_4ossw_crown (npm)
- Aug 14, 2025
Malicious code in xylophone_2l8nq_rnh9j_yellow (npm)
- Aug 14, 2025
Malicious code in xylophone-zeppelin-nlwv (npm)
- Aug 14, 2025
Malicious code in xylophone-zenith-hza694-project (npm)
- Aug 14, 2025
Malicious code in xylophone-zebra-pih895-project (npm)
- Aug 14, 2025
Malicious code in xylophone-zebra-kbj679-project (npm)
- Aug 14, 2025
Malicious code in xylophone-yearling-6mjz (npm)
- Aug 14, 2025
Malicious code in xylophone-yak-mrb699-project (npm)
- Aug 14, 2025
Malicious code in xylophone-xenon-znn416-project (npm)
- Aug 14, 2025
Malicious code in xylophone-xenon-fbc889-project (npm)
- Aug 14, 2025
Malicious code in xylophone-whiskey-h2rj (npm)
- Aug 14, 2025
Malicious code in xylophone-volcano-qmw136-project (npm)
- Aug 14, 2025
Malicious code in xylophone-violet-pnx044-project (npm)
- Aug 14, 2025
Malicious code in xylophone-umbra-oxb850-project (npm)
- Aug 14, 2025
Malicious code in xylophone-thunder-uby004-project (npm)
- Aug 14, 2025
Malicious code in xylophone-supernova-rjl2 (npm)
- Aug 14, 2025
Malicious code in xylophone-sibjm-0ooln-xenon-project (npm)
- Aug 14, 2025
Malicious code in xylophone-savanna-cmx842-project (npm)
- Aug 14, 2025
Malicious code in xylophone-reef-hnr436-project (npm)
- Aug 14, 2025
Malicious code in xylophone-quill-ujq183-project (npm)
- Aug 14, 2025
Malicious code in xylophone-q097e-z7kw6-keystone-project (npm)
- Aug 14, 2025
Malicious code in xylophone-opal-thp753-project (npm)
- Aug 14, 2025
Malicious code in xylophone-oak-cvn770-project (npm)
Page 5222 of 6,667