Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xuanxue-jinnang-xingmingpian (npm)
- Aug 14, 2025
Malicious code in xturebase (npm)
- Aug 14, 2025
Malicious code in xtjecifpdbkwqrnm (npm)
- Aug 14, 2025
Malicious code in xtate-services (npm)
- Aug 14, 2025
Malicious code in xtaodriblmwqfcyk (npm)
- Aug 14, 2025
Malicious code in xsuagjbezhpfoqkm (npm)
- Aug 14, 2025
Malicious code in xslasa20-poly1305-encoding (npm)
- Aug 14, 2025
Malicious code in xsfateszt (npm)
- Aug 14, 2025
Malicious code in xsalefter (npm)
- Aug 14, 2025
Malicious code in xs-js-ipld-dag-cbor (npm)
- Aug 14, 2025
Malicious code in xrqascuvhdmbyonk (npm)
- Aug 14, 2025
Malicious code in xrhjnvfekzalmuty (npm)
- Aug 14, 2025
Malicious code in xrec-service-common (npm)
- Aug 14, 2025
Malicious code in xrec-base-dao-mongoose (npm)
- Aug 14, 2025
Malicious code in xrcctrl (npm)
- Aug 14, 2025
Malicious code in xray-zv2-project (npm)
- Aug 14, 2025
Malicious code in xray-zulu-w6is (npm)
- Aug 14, 2025
Malicious code in xray-zulu-adyf (npm)
- Aug 14, 2025
Malicious code in xray-yankee-6x6p (npm)
- Aug 14, 2025
Malicious code in xray-yam-mjce (npm)
- Aug 14, 2025
Malicious code in xray-y0w-project (npm)
- Aug 14, 2025
Malicious code in xray-xigua-strf (npm)
- Aug 14, 2025
Malicious code in xray-whiskey-tpif (npm)
- Aug 14, 2025
Malicious code in xray-violet-5k98 (npm)
- Aug 14, 2025
Malicious code in xray-victor-zpmo (npm)
- Aug 14, 2025
Malicious code in xray-viaduct-s4mo (npm)
- Aug 14, 2025
Malicious code in xray-uniform-juliet-fufts (npm)
- Aug 14, 2025
Malicious code in xray-umbrella-i2cl (npm)
- Aug 14, 2025
Malicious code in xray-ugli-victor-lujew (npm)
- Aug 14, 2025
Malicious code in xray-tango-fig-zeumy (npm)
- Aug 14, 2025
Malicious code in xray-tangerine-zulu-jxles (npm)
- Aug 14, 2025
Malicious code in xray-tangerine-ewpt (npm)
- Aug 14, 2025
Malicious code in xray-t8u-project (npm)
- Aug 14, 2025
Malicious code in xray-sierra-ubgv (npm)
- Aug 14, 2025
Malicious code in xray-sierra-fyfv (npm)
- Aug 14, 2025
Malicious code in xray-raspberry-romeo-tlwxv (npm)
- Aug 14, 2025
Malicious code in xray-pif-project (npm)
- Aug 14, 2025
Malicious code in xray-papaya-waun (npm)
- Aug 14, 2025
Malicious code in xray-papa-ezvp (npm)
- Aug 14, 2025
Malicious code in xray-ot6-project (npm)
- Aug 14, 2025
Malicious code in xray-oscar-tango-leygy (npm)
- Aug 14, 2025
Malicious code in xray-ool-project (npm)
- Aug 14, 2025
Malicious code in xray-maple-mqni (npm)
- Aug 14, 2025
Malicious code in xray-mango-ksvg (npm)
- Aug 14, 2025
Malicious code in xray-lima-bvgi (npm)
- Aug 14, 2025
Malicious code in xray-lemon-tangerine-qyvlf (npm)
- Aug 14, 2025
Malicious code in xray-lemon-foxtrot-zknte (npm)
- Aug 14, 2025
Malicious code in xray-kjt-project (npm)
- Aug 14, 2025
Malicious code in xray-kiwi-sierra-rqvyo (npm)
- Aug 14, 2025
Malicious code in xray-kiwi-fab7 (npm)
Page 5224 of 6,667