Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xigua-pz6-project (npm)
- Aug 14, 2025
Malicious code in xigua-p71-project (npm)
- Aug 14, 2025
Malicious code in xigua-oxq-project (npm)
- Aug 14, 2025
Malicious code in xigua-ot8-project (npm)
- Aug 14, 2025
Malicious code in xigua-oscar-foxtrot-reybb (npm)
- Aug 14, 2025
Malicious code in xigua-oscar-ejhk (npm)
- Aug 14, 2025
Malicious code in xigua-nzm-project (npm)
- Aug 14, 2025
Malicious code in xigua-november-mebr (npm)
- Aug 14, 2025
Malicious code in xigua-nectarine-xmfw (npm)
- Aug 14, 2025
Malicious code in xigua-mango-foxtrot-qqqpp (npm)
- Aug 14, 2025
Malicious code in xigua-m1o-project (npm)
- Aug 14, 2025
Malicious code in xigua-lion-2hrd (npm)
- Aug 14, 2025
Malicious code in xigua-lima-foyg (npm)
- Aug 14, 2025
Malicious code in xigua-lettuce-j0xl (npm)
- Aug 14, 2025
Malicious code in xigua-kilo-txfl (npm)
- Aug 14, 2025
Malicious code in xigua-j03-project (npm)
- Aug 14, 2025
Malicious code in xigua-iyg-project (npm)
- Aug 14, 2025
Malicious code in xigua-iceberg-69im (npm)
- Aug 14, 2025
Malicious code in xigua-i00-project (npm)
- Aug 14, 2025
Malicious code in xigua-hxq-project (npm)
- Aug 14, 2025
Malicious code in xigua-honeydew-echo-fvguh (npm)
- Aug 14, 2025
Malicious code in xigua-he1-project (npm)
- Aug 14, 2025
Malicious code in xigua-ha4-project (npm)
- Aug 14, 2025
Malicious code in xigua-grape-cqbu (npm)
- Aug 14, 2025
Malicious code in xigua-golf-mike-pgexl (npm)
- Aug 14, 2025
Malicious code in xigua-golf-grape-stgll (npm)
- Aug 14, 2025
Malicious code in xigua-ginkgo-buv1 (npm)
- Aug 14, 2025
Malicious code in xigua-f6l-project (npm)
- Aug 14, 2025
Malicious code in xigua-elderberry-hbhi (npm)
- Aug 14, 2025
Malicious code in xigua-elderberry-apple-icsjn (npm)
- Aug 14, 2025
Malicious code in xigua-echo-eyxc (npm)
- Aug 14, 2025
Malicious code in xigua-echo-bravo-gnkeq (npm)
- Aug 14, 2025
Malicious code in xigua-delta-xbyl (npm)
- Aug 14, 2025
Malicious code in xigua-delta-hotel-myycq (npm)
- Aug 14, 2025
Malicious code in xigua-date-qygr (npm)
- Aug 14, 2025
Malicious code in xigua-date-alpha-muvgj (npm)
- Aug 14, 2025
Malicious code in xigua-cherry-rpep (npm)
- Aug 14, 2025
Malicious code in xigua-charlie-tmzv (npm)
- Aug 14, 2025
Malicious code in xigua-bs0-project (npm)
- Aug 14, 2025
Malicious code in xigua-bravo-jqdc (npm)
- Aug 14, 2025
Malicious code in xigua-beetroot-xjsc (npm)
- Aug 14, 2025
Malicious code in xigua-banana-bravo-xruio (npm)
- Aug 14, 2025
Malicious code in xigua-banana-bravo-wbpsm (npm)
- Aug 14, 2025
Malicious code in xigua-apple-lmlp (npm)
- Aug 14, 2025
Malicious code in xigua-alpha-elderberry-oaqxb (npm)
- Aug 14, 2025
Malicious code in xigua-alpha-bcmj (npm)
- Aug 14, 2025
Malicious code in xigua-9om-project (npm)
- Aug 14, 2025
Malicious code in xigua-7zy-project (npm)
- Aug 14, 2025
Malicious code in xigua-75n-project (npm)
- Aug 14, 2025
Malicious code in xigua-2yr-project (npm)
Page 5227 of 6,667