Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,317 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xo-dione-wasat-palynology (npm)
- Aug 14, 2025
Malicious code in xo-device-info (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-credit-components (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-bounce (npm)
- Aug 14, 2025
Malicious code in xo-beaver (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xo-angular-shims-placeholder (npm)
- Aug 14, 2025
Malicious code in xo-address-components (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xnveukafhkjylpcr (npm)
- Aug 14, 2025
Malicious code in xntvplycaigrozuf (npm)
- Aug 14, 2025
Malicious code in xntuples (npm)
- Aug 14, 2025
Malicious code in xnqyrzhiopgekkfj (npm)
- Aug 14, 2025
Malicious code in xnoopsy (npm)
- Aug 14, 2025
Malicious code in xnoise (npm)
- Aug 14, 2025
Malicious code in xnkpqygmsldchber (npm)
- Aug 14, 2025
Malicious code in xnianqtest (npm)
- Aug 14, 2025
Malicious code in xnatetris (npm)
- Aug 14, 2025
Malicious code in xn--trdktls-oxa154afao42kmb2964e (npm)
- Aug 14, 2025
Malicious code in xmvnsfycjiqzbakg (npm)
- Aug 14, 2025
Malicious code in xmpptrace (npm)
- Aug 14, 2025
Malicious code in xmlparst (npm)
- Aug 14, 2025
Malicious code in xmlers (npm)
- Aug 14, 2025
Malicious code in xmldsign (npm)
- Aug 14, 2025
Malicious code in xml-warp-magellan-mira (npm)
- Aug 14, 2025
Malicious code in xml-sandbox-container-process-long (npm)
- Aug 14, 2025
Malicious code in xml-query-minify-error-lambda (npm)
- Aug 14, 2025
Malicious code in xml-meteor-local-browserify (npm)
- Aug 14, 2025
Malicious code in xml-juno-leda-blaze (npm)
- Aug 14, 2025
Malicious code in xml-asthenosphere-less-loader-graphql (npm)
- Aug 14, 2025
Malicious code in xml-apollo-writable-heka (npm)
- Aug 14, 2025
Malicious code in xlsx-to-json-lh (npm)
- Aug 14, 2025
Malicious code in xlpiktgzdaekbvyu (npm)
- Aug 14, 2025
Malicious code in xlozfsptmyuhrjac (npm)
- Aug 14, 2025
Malicious code in xkudzhwpygafkjtr (npm)
- Aug 14, 2025
Malicious code in xkpauiyzebdtnvmr (npm)
- Aug 14, 2025
Malicious code in xketch (npm)
- Aug 14, 2025
Malicious code in xjlbcenakmwstyou (npm)
- Aug 14, 2025
Malicious code in xizang-xinyujia (npm)
- Aug 14, 2025
Malicious code in xiyinli-faze (npm)
- Aug 14, 2025
Malicious code in xiongxt (npm)
- Aug 14, 2025
Malicious code in xinwu-mofashu (npm)
- Aug 14, 2025
Malicious code in xinshidai-xiaohai-yurenlei-yishi-datuibian (npm)
- Aug 14, 2025
Malicious code in xinqiao-jiehe-shenxinde-nengliang-liaofa (npm)
- Aug 14, 2025
Malicious code in xinmei (npm)
- Aug 14, 2025
Malicious code in xinmaoshan-qimen-miji (npm)
- Aug 14, 2025
Malicious code in xinli-zhanxingxue-quanshu (npm)
- Aug 14, 2025
Malicious code in xinli-caozongshu-daquanji (npm)
- Aug 14, 2025
Malicious code in xingzuo-xuexing-dapk (npm)
- Aug 14, 2025
Malicious code in xingzuo-quanshu (npm)
- Aug 14, 2025
Malicious code in xingzuo-lingshu (npm)
- Aug 14, 2025
Malicious code in xingxue-dacheng (npm)
Page 5226 of 6,667