Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xigua-2f5-project (npm)
- Aug 14, 2025
Malicious code in xifsymdhklukwrpn (npm)
- Aug 14, 2025
Malicious code in xiaozewei (npm)
- Aug 14, 2025
Malicious code in xiaoxue (npm)
- Aug 14, 2025
Malicious code in xiaomei (npm)
- Aug 14, 2025
Malicious code in xiaoliuren-yucefa-quanji (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-ver9 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-ver8 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-ver7 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-jiqi-yingyong-ver5 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-jiqi-yingyong-ver4 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-jiqi-yingyong-ver3 (npm)
- Aug 14, 2025
Malicious code in xianxing-daishu-gaoji-jiaocheng (npm)
- Aug 14, 2025
Malicious code in xiantu-touzishu (npm)
- Aug 14, 2025
Malicious code in xiangweb (npm)
- Aug 14, 2025
Malicious code in xiangtu (npm)
- Aug 14, 2025
Malicious code in xianglp (npm)
- Aug 14, 2025
Malicious code in xi-xml-user-process-fire (npm)
- Aug 14, 2025
Malicious code in xi-web-data-water-quick (npm)
- Aug 14, 2025
Malicious code in xi-shell-zeta-assert-encode (npm)
- Aug 14, 2025
Malicious code in xi-secure-lambda-uglify-authorize (npm)
- Aug 14, 2025
Malicious code in xi-psi-fire-meta-rain (npm)
- Aug 14, 2025
Malicious code in xi-epsilon-star-minify-eta (npm)
- Aug 14, 2025
Malicious code in xfwukclsotjbzvyn (npm)
- Aug 14, 2025
Malicious code in xflow (npm)
- Aug 14, 2025
Malicious code in xflamp (npm)
- Aug 14, 2025
Malicious code in xfjsqtmklgzoaphd (npm)
- Aug 14, 2025
Malicious code in xesto (npm)
- Aug 14, 2025
Malicious code in xerxes-quito-despina-node-sass (npm)
- Aug 14, 2025
Malicious code in xerxes-prettier-plugin-markdown-airbnb-resolvers (npm)
- Aug 14, 2025
Malicious code in xerxes-perturbation-rollup-quasar (npm)
- Aug 14, 2025
Malicious code in xerxes-mutation-dysonswarm-supernova (npm)
- Aug 14, 2025
Malicious code in xerxes-augmentedreality-membrane-chalk (npm)
- Aug 14, 2025
Malicious code in xerxes-apollo-antares-proxima (npm)
- Aug 14, 2025
Malicious code in xerus-yard-vsl833-project (npm)
- Aug 14, 2025
Malicious code in xerus-vulture-drs202-project (npm)
- Aug 14, 2025
Malicious code in xerus-vortex-nkw514-project (npm)
- Aug 14, 2025
Malicious code in xerus-vista-zcw130-project (npm)
- Aug 14, 2025
Malicious code in xerus-utopia-lxa949-project (npm)
- Aug 14, 2025
Malicious code in xerus-umbra-ofj068-project (npm)
- Aug 14, 2025
Malicious code in xerus-reef-aou351-project (npm)
- Aug 14, 2025
Malicious code in xerus-quilt-yih538-project (npm)
- Aug 14, 2025
Malicious code in xerus-quasar-plk104-project (npm)
- Aug 14, 2025
Malicious code in xerus-jellyfish-eep827-project (npm)
- Aug 14, 2025
Malicious code in xerus-glacier-wyk873-project (npm)
- Aug 14, 2025
Malicious code in xerus-coral-egp050-project (npm)
- Aug 14, 2025
Malicious code in xerus-cherry-ujt576-project (npm)
- Aug 14, 2025
Malicious code in xerus-butterfly-mon413-project (npm)
- Aug 14, 2025
Malicious code in xerox-xerus-zkf275-project (npm)
- Aug 14, 2025
Malicious code in xerox-xanadu-oww310-project (npm)
Page 5228 of 6,667