Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xenon-blazar-leda-mira (npm)
- Aug 14, 2025
Malicious code in xenon-bamboo-ven102-project (npm)
- Aug 14, 2025
Malicious code in xenon-asteroid-mej334-project (npm)
- Aug 14, 2025
Malicious code in xenon-asteroid-bxd787-project (npm)
- Aug 14, 2025
Malicious code in xenon-amber-jgb951-project (npm)
- Aug 14, 2025
Malicious code in xenon-almond-mvqg (npm)
- Aug 14, 2025
Malicious code in xenon-abiogenesis-got-quasar (npm)
- Aug 14, 2025
Malicious code in xenon-6kho4-eb6jz-harmony-project (npm)
- Aug 14, 2025
Malicious code in xenon-0xyls-4a33u-glacier-project (npm)
- Aug 14, 2025
Malicious code in xenolith_p4mer_qr3xv_lullaby (npm)
- Aug 14, 2025
Malicious code in xenolith_6hnxc_fgbci_lullaby (npm)
- Aug 14, 2025
Malicious code in xenofixer (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xenobiology-darkmatter-schema-cosmicsilence (npm)
- Aug 14, 2025
Malicious code in xeno-executor (npm)
1 compromised version
- Aug 14, 2025
Malicious code in xenman (npm)
- Aug 14, 2025
Malicious code in xenith_qsfti_08zmj_bluebird (npm)
- Aug 14, 2025
Malicious code in xenith_mkzq9_d2h4v_opal (npm)
- Aug 14, 2025
Malicious code in xenith_hapqu_k44ks_driftwood (npm)
- Aug 14, 2025
Malicious code in xenith_fqxqy_6j1tc_zodiac (npm)
- Aug 14, 2025
Malicious code in xenith_drs2r_3gna8_yonder (npm)
- Aug 14, 2025
Malicious code in xenith_a2aoj_bf0r3_zenith (npm)
- Aug 14, 2025
Malicious code in xenith-whzxn-psofd-ember-project (npm)
- Aug 14, 2025
Malicious code in xenith-rn7of-fhejx-ember-project (npm)
- Aug 14, 2025
Malicious code in xenith-qflv3-gmcd6-velvet-project (npm)
- Aug 14, 2025
Malicious code in xenith-pql73-dftd8-jade-project (npm)
- Aug 14, 2025
Malicious code in xenith-k07oa-gwxa7-yarn-project (npm)
- Aug 14, 2025
Malicious code in xenith-6n82k-vye3a-keystone-project (npm)
- Aug 14, 2025
Malicious code in xenith-6elzx-79g7r-yeti-project (npm)
- Aug 14, 2025
Malicious code in xendit-user-service-client (npm)
- Aug 14, 2025
Malicious code in xendit-forex-service (npm)
- Aug 14, 2025
Malicious code in xendit-bni-connector (npm)
- Aug 14, 2025
Malicious code in xejnmcbogvpslazk (npm)
- Aug 14, 2025
Malicious code in xedecrypt (npm)
- Aug 14, 2025
Malicious code in xecrypt (npm)
- Aug 14, 2025
Malicious code in xebialabs (npm)
- Aug 14, 2025
Malicious code in xdh-go (npm)
- Aug 14, 2025
Malicious code in xd-test-gallery (npm)
- Aug 14, 2025
Malicious code in xbzecfylgvsopniw (npm)
- Aug 14, 2025
Malicious code in xbox-card-balance-today (npm)
- Aug 14, 2025
Malicious code in xbjifzkaknptyluq (npm)
- Aug 14, 2025
Malicious code in xbbzaini (npm)
- Aug 14, 2025
Malicious code in xaviera (npm)
- Aug 14, 2025
Malicious code in xaver-tapai61-breki (npm)
- Aug 14, 2025
Malicious code in xaver-oblok58-sukiwir (npm)
- Aug 14, 2025
Malicious code in xaver-lodeh96-breki (npm)
- Aug 14, 2025
Malicious code in xaver-keripik57-breki (npm)
- Aug 14, 2025
Malicious code in xaver-kentang20-sukiwir (npm)
- Aug 14, 2025
Malicious code in xaver-kemplang6-sukiwir (npm)
- Aug 14, 2025
Malicious code in xaver-gado-gado75-kuki (npm)
- Aug 14, 2025
Malicious code in xaver-empal6-breki (npm)
Page 5231 of 6,667