Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in xatclasse (npm)
- Aug 14, 2025
Malicious code in xanthus-writable-janus-middleware (npm)
- Aug 14, 2025
Malicious code in xanthus-start-fornax-deneb (npm)
- Aug 14, 2025
Malicious code in xanthus-quark-wormhole-neutronstar (npm)
- Aug 14, 2025
Malicious code in xanthus-grunt-foundation-hyperion (npm)
- Aug 14, 2025
Malicious code in xanthus-gridsome-altair-dione (npm)
- Aug 14, 2025
Malicious code in xanthus-geochemistry-protoplanetarydisk-biogeochemistry (npm)
- Aug 14, 2025
Malicious code in xanadu_uvedd_k26ii_ivy (npm)
- Aug 14, 2025
Malicious code in xanadu_to252_4xozm_thunder (npm)
- Aug 14, 2025
Malicious code in xanadu_5nlsw_nw7d3_joy (npm)
- Aug 14, 2025
Malicious code in xanadu-violet-yhy540-project (npm)
- Aug 14, 2025
Malicious code in xanadu-u3y6w-4vk6v-xenith-project (npm)
- Aug 14, 2025
Malicious code in xanadu-test-xanadu-tectonophysics (npm)
- Aug 14, 2025
Malicious code in xanadu-tectonophysics-oscillation-dione (npm)
- Aug 14, 2025
Malicious code in xanadu-sqlite-palynology-release-it (npm)
- Aug 14, 2025
Malicious code in xanadu-pino-dactyl-proxima (npm)
- Aug 14, 2025
Malicious code in xanadu-pcp5m-79dms-velvet-project (npm)
- Aug 14, 2025
Malicious code in xanadu-mxnlw-royfy-dawn-project (npm)
- Aug 14, 2025
Malicious code in xanadu-meadow-axm362-project (npm)
- Aug 14, 2025
Malicious code in xanadu-leopard-xdt272-project (npm)
- Aug 14, 2025
Malicious code in xanadu-k8mj8-aokcz-dew-project (npm)
- Aug 14, 2025
Malicious code in xanadu-joas9-vwnlw-grove-project (npm)
- Aug 14, 2025
Malicious code in xanadu-jellyfish-iof249-project (npm)
- Aug 14, 2025
Malicious code in xanadu-h1tc8-zt1r1-horizon-project (npm)
- Aug 14, 2025
Malicious code in xanadu-giraffe-tkn378-project (npm)
- Aug 14, 2025
Malicious code in xanadu-ge3zs-5cuaw-boulder-project (npm)
- Aug 14, 2025
Malicious code in xanadu-forest-bow374-project (npm)
- Aug 14, 2025
Malicious code in xanadu-fm3ov-hl4xy-tide-project (npm)
- Aug 14, 2025
Malicious code in xanadu-exbv5-kobdd-dune-project (npm)
- Aug 14, 2025
Malicious code in xanadu-ecoiq-waflb-zenith-project (npm)
- Aug 14, 2025
Malicious code in xanadu-decoherence-epigenetics-xanadu (npm)
- Aug 14, 2025
Malicious code in xanadu-ddnos-mxtiz-throne-project (npm)
- Aug 14, 2025
Malicious code in xanadu-carpo-abiogenesis-sagitta (npm)
- Aug 14, 2025
Malicious code in xanadu-buelj-3mowg-lucid-project (npm)
- Aug 14, 2025
Malicious code in xanadu-boulder-xbv268-project (npm)
- Aug 14, 2025
Malicious code in xanadu-bnklw-e5wnw-ripple-project (npm)
- Aug 14, 2025
Malicious code in xanadu-2ljj4-2tk5x-horizon-project (npm)
- Aug 14, 2025
Malicious code in xanadu-1xieh-4pdiv-throne-project (npm)
- Aug 14, 2025
Malicious code in xamarinio (npm)
- Aug 14, 2025
Malicious code in x_exchanges (npm)
- Aug 14, 2025
Malicious code in x0iliom7ielzziorieyqsnrnkihknzr5 (npm)
- Aug 14, 2025
Malicious code in wzxknblfkahtupem (npm)
- Aug 14, 2025
Malicious code in wzmbcvrkpjktsixe (npm)
- Aug 14, 2025
Malicious code in wzltools (npm)
- Aug 14, 2025
Malicious code in wzlsfhxyaqgrnptc (npm)
- Aug 14, 2025
Malicious code in wynston (npm)
- Aug 14, 2025
Malicious code in wynk_data_module (npm)
- Aug 14, 2025
Malicious code in wymcount (npm)
- Aug 14, 2025
Malicious code in wxutsyiprcbkadzo (npm)
- Aug 14, 2025
Malicious code in wxrenamer (npm)
Page 5232 of 6,667