Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xenon_9myxc_r64ds_quicksilver (npm)
- Aug 14, 2025
Malicious code in xenon_74ygk_q5q7t_antelope (npm)
- Aug 14, 2025
Malicious code in xenon_3fipc_xxmop_oasis (npm)
- Aug 14, 2025
Malicious code in xenon_3dkk4_8ct2r_saffron (npm)
- Aug 14, 2025
Malicious code in xenon_0so0j_ox8m2_crystal (npm)
- Aug 14, 2025
Malicious code in xenon-zenith-qlf154-project (npm)
- Aug 14, 2025
Malicious code in xenon-zenith-lkn201-project (npm)
- Aug 14, 2025
Malicious code in xenon-yonder-ihk107-project (npm)
- Aug 14, 2025
Malicious code in xenon-yaml-pm2-saturnology (npm)
- Aug 14, 2025
Malicious code in xenon-willow-iep311-project (npm)
- Aug 14, 2025
Malicious code in xenon-whale-guu259-project (npm)
- Aug 14, 2025
Malicious code in xenon-volcano-9j04 (npm)
- Aug 14, 2025
Malicious code in xenon-uranium-rlg405-project (npm)
- Aug 14, 2025
Malicious code in xenon-ub27v-lcwx2-moondust-project (npm)
- Aug 14, 2025
Malicious code in xenon-tornado-lvl701-project (npm)
- Aug 14, 2025
Malicious code in xenon-thunder-ugo277-project (npm)
- Aug 14, 2025
Malicious code in xenon-swan-uwm078-project (npm)
- Aug 14, 2025
Malicious code in xenon-romeo-08qf (npm)
- Aug 14, 2025
Malicious code in xenon-reef-csm442-project (npm)
- Aug 14, 2025
Malicious code in xenon-rainbow-bzv466-project (npm)
- Aug 14, 2025
Malicious code in xenon-qpsmv-sxibm-bison-project (npm)
- Aug 14, 2025
Malicious code in xenon-pinnacle-fwn326-project (npm)
- Aug 14, 2025
Malicious code in xenon-peony-leh904-project (npm)
- Aug 14, 2025
Malicious code in xenon-orbit-v5i2 (npm)
- Aug 14, 2025
Malicious code in xenon-ocean-ltz904-project (npm)
- Aug 14, 2025
Malicious code in xenon-oauth-quantumfoam-geckodriver (npm)
- Aug 14, 2025
Malicious code in xenon-nimbus-lxu167-project (npm)
- Aug 14, 2025
Malicious code in xenon-nautilus-maw577-project (npm)
- Aug 14, 2025
Malicious code in xenon-markdown-pdf-backend-playwright (npm)
- Aug 14, 2025
Malicious code in xenon-lion-bkg8 (npm)
- Aug 14, 2025
Malicious code in xenon-lemon-vbsw (npm)
- Aug 14, 2025
Malicious code in xenon-l0n7z-itbi2-quartz-project (npm)
- Aug 14, 2025
Malicious code in xenon-kiwi-ocm271-project (npm)
- Aug 14, 2025
Malicious code in xenon-kiwi-lsa042-project (npm)
- Aug 14, 2025
Malicious code in xenon-kite-ecj893-project (npm)
- Aug 14, 2025
Malicious code in xenon-kelp-lza221-project (npm)
- Aug 14, 2025
Malicious code in xenon-jest-fomalhaut-bioinformatics (npm)
- Aug 14, 2025
Malicious code in xenon-jellyfish-ozp950-project (npm)
- Aug 14, 2025
Malicious code in xenon-jellyfish-kuk280-project (npm)
- Aug 14, 2025
Malicious code in xenon-igloo-ioo931-project (npm)
- Aug 14, 2025
Malicious code in xenon-iei8f-bck9y-unity-project (npm)
- Aug 14, 2025
Malicious code in xenon-iceberg-nlc124-project (npm)
- Aug 14, 2025
Malicious code in xenon-frost-hio865-project (npm)
- Aug 14, 2025
Malicious code in xenon-foxtrot-snal (npm)
- Aug 14, 2025
Malicious code in xenon-elephant-aow174-project (npm)
- Aug 14, 2025
Malicious code in xenon-dove-lkb015-project (npm)
- Aug 14, 2025
Malicious code in xenon-dolphin-kaq502-project (npm)
- Aug 14, 2025
Malicious code in xenon-dendrochronology-cors-loglevel (npm)
- Aug 14, 2025
Malicious code in xenon-crystal-qad185-project (npm)
- Aug 14, 2025
Malicious code in xenon-botel-580r2-yellow-project (npm)
Page 5230 of 6,667