Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xray-k8o-project (npm)
- Aug 14, 2025
Malicious code in xray-k3s-project (npm)
- Aug 14, 2025
Malicious code in xray-juliet-bravo-wbtxc (npm)
- Aug 14, 2025
Malicious code in xray-jgq-project (npm)
- Aug 14, 2025
Malicious code in xray-island-pvra (npm)
- Aug 14, 2025
Malicious code in xray-india-zulu-lphwt (npm)
- Aug 14, 2025
Malicious code in xray-iceberg-itxp (npm)
- Aug 14, 2025
Malicious code in xray-hpv-project (npm)
- Aug 14, 2025
Malicious code in xray-hotel-gnis (npm)
- Aug 14, 2025
Malicious code in xray-grape-nngk (npm)
- Aug 14, 2025
Malicious code in xray-golf-velw (npm)
- Aug 14, 2025
Malicious code in xray-golf-uniform-rukmr (npm)
- Aug 14, 2025
Malicious code in xray-golf-iiem (npm)
- Aug 14, 2025
Malicious code in xray-ginkgo-tttz (npm)
- Aug 14, 2025
Malicious code in xray-foxtrot-quince-xtlnr (npm)
- Aug 14, 2025
Malicious code in xray-fig-vrow (npm)
- Aug 14, 2025
Malicious code in xray-eq1-project (npm)
- Aug 14, 2025
Malicious code in xray-elderberry-echo-kzvty (npm)
- Aug 14, 2025
Malicious code in xray-delta-vanilla-ltrdk (npm)
- Aug 14, 2025
Malicious code in xray-delta-dyhf (npm)
- Aug 14, 2025
Malicious code in xray-da3-project (npm)
- Aug 14, 2025
Malicious code in xray-cln-project (npm)
- Aug 14, 2025
Malicious code in xray-cbb-project (npm)
- Aug 14, 2025
Malicious code in xray-bravo-o4ps (npm)
- Aug 14, 2025
Malicious code in xray-banana-sirr (npm)
- Aug 14, 2025
Malicious code in xray-banana-bmzg (npm)
- Aug 14, 2025
Malicious code in xray-atp-project (npm)
- Aug 14, 2025
Malicious code in xray-5t8-project (npm)
- Aug 14, 2025
Malicious code in xray-5nw-project (npm)
- Aug 14, 2025
Malicious code in xray-561-project (npm)
- Aug 14, 2025
Malicious code in xray-0wf-project (npm)
- Aug 14, 2025
Malicious code in xqrunner (npm)
- Aug 14, 2025
Malicious code in xpzobnsiyfavceug (npm)
- Aug 14, 2025
Malicious code in xpull_exchanges_m (npm)
- Aug 14, 2025
Malicious code in xpugno (npm)
- Aug 14, 2025
Malicious code in xpointer (npm)
- Aug 14, 2025
Malicious code in xpider (npm)
- Aug 14, 2025
Malicious code in xpeccy (npm)
- Aug 14, 2025
Malicious code in xpc.js (npm)
- Aug 14, 2025
Malicious code in xoverflow (npm)
- Aug 14, 2025
Malicious code in xoshared (npm)
- Aug 14, 2025
Malicious code in xo-typescript (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-space (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-selenium-commitlint-config-angular-genomics (npm)
- Aug 14, 2025
Malicious code in xo-react (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-publish-semantic-ui-lacerta (npm)
- Aug 14, 2025
Malicious code in xo-prosthetics-cz-conventional-changelog-biosignature (npm)
- Aug 14, 2025
Malicious code in xo-landing-router (npm)
- Aug 14, 2025
Malicious code in xo-jquery-mask-plugin (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-grunt-publish-charon (npm)
Page 5225 of 6,667