Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xerox-vine-sux970-project (npm)
- Aug 14, 2025
Malicious code in xerox-uranium-lkj894-project (npm)
- Aug 14, 2025
Malicious code in xerox-unicorn-bck800-project (npm)
- Aug 14, 2025
Malicious code in xerox-sunset-edu206-project (npm)
- Aug 14, 2025
Malicious code in xerox-quilt-awc321-project (npm)
- Aug 14, 2025
Malicious code in xerox-quill-rbe140-project (npm)
- Aug 14, 2025
Malicious code in xerox-quasar-gcv244-project (npm)
- Aug 14, 2025
Malicious code in xerox-piano-ygz057-project (npm)
- Aug 14, 2025
Malicious code in xerox-opal-top498-project (npm)
- Aug 14, 2025
Malicious code in xerox-octopus-blz884-project (npm)
- Aug 14, 2025
Malicious code in xerox-nectar-voc513-project (npm)
- Aug 14, 2025
Malicious code in xerox-lilypad-lmq686-project (npm)
- Aug 14, 2025
Malicious code in xerox-koala-brx784-project (npm)
- Aug 14, 2025
Malicious code in xerox-jellyfish-pak874-project (npm)
- Aug 14, 2025
Malicious code in xerox-iguana-zak568-project (npm)
- Aug 14, 2025
Malicious code in xerox-icicle-cxg934-project (npm)
- Aug 14, 2025
Malicious code in xerox-honeycomb-cxp071-project (npm)
- Aug 14, 2025
Malicious code in xerox-fern-vbb741-project (npm)
- Aug 14, 2025
Malicious code in xerox-fern-pom876-project (npm)
- Aug 14, 2025
Malicious code in xerox-elephant-kmq300-project (npm)
- Aug 14, 2025
Malicious code in xerox-ecosystem-dwm284-project (npm)
- Aug 14, 2025
Malicious code in xerox-dove-ytj902-project (npm)
- Aug 14, 2025
Malicious code in xerox-cloud-pgj645-project (npm)
- Aug 14, 2025
Malicious code in xerox-cliff-sfk317-project (npm)
- Aug 14, 2025
Malicious code in xerox-brook-byc200-project (npm)
- Aug 14, 2025
Malicious code in xerox-bonfire-nas550-project (npm)
- Aug 14, 2025
Malicious code in xerox-aroma-tjf016-project (npm)
- Aug 14, 2025
Malicious code in xerophyte-wormhole-bjdh (npm)
- Aug 14, 2025
Malicious code in xerophyte-void-ike6 (npm)
- Aug 14, 2025
Malicious code in xerophyte-uniform-53fl (npm)
- Aug 14, 2025
Malicious code in xerophyte-teak-h341 (npm)
- Aug 14, 2025
Malicious code in xerophyte-oak-7g3i (npm)
- Aug 14, 2025
Malicious code in xerophyte-meteor-gd0n (npm)
- Aug 14, 2025
Malicious code in xerophyte-kilo-n13i (npm)
- Aug 14, 2025
Malicious code in xerophyte-india-72ow (npm)
- Aug 14, 2025
Malicious code in xerophyte-foxtrot-ngsu (npm)
- Aug 14, 2025
Malicious code in xepress (npm)
- Aug 14, 2025
Malicious code in xenos-solis-markdownlint-izar (npm)
- Aug 14, 2025
Malicious code in xenos-prompts-kaus-child-process (npm)
- Aug 14, 2025
Malicious code in xenos-leda-hugo-forever (npm)
- Aug 14, 2025
Malicious code in xenos-cosmicsilence-ichnology-firebase (npm)
- Aug 14, 2025
Malicious code in xenos-blaze-mui-jsonp (npm)
- Aug 14, 2025
Malicious code in xenos-accretion-eleventy-exoplanetology (npm)
- Aug 14, 2025
Malicious code in xenon_wj7ni_ec5ea_solstice (npm)
- Aug 14, 2025
Malicious code in xenon_rwvev_yuwah_xylophone (npm)
- Aug 14, 2025
Malicious code in xenon_rk7xb_pnice_lunar (npm)
- Aug 14, 2025
Malicious code in xenon_pcto2_h3lqi_voyage (npm)
- Aug 14, 2025
Malicious code in xenon_owxm2_jzlah_kestrel (npm)
- Aug 14, 2025
Malicious code in xenon_n0mv9_yxfwp_yew (npm)
- Aug 14, 2025
Malicious code in xenon_as4mg_zcyr7_flare (npm)
Page 5229 of 6,667