Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,301 total in npm · sorted newest first- Aug 14, 2025
Malicious code in wxeloqua (npm)
- Aug 14, 2025
Malicious code in wwwtools (npm)
- Aug 14, 2025
Malicious code in wwwdroid (npm)
- Aug 14, 2025
Malicious code in www-latam-commons (npm)
- Aug 14, 2025
Malicious code in wwesdwww (npm)
- Aug 14, 2025
Malicious code in wwe-nftcollection738 (npm)
- Aug 14, 2025
Malicious code in wwe-nftcollection732 (npm)
- Aug 14, 2025
Malicious code in wwe-nftcollection666 (npm)
- Aug 14, 2025
Malicious code in wwe-nftcollection606 (npm)
- Aug 14, 2025
Malicious code in wwe-nftcollection364 (npm)
- Aug 14, 2025
Malicious code in ww-whisper (npm)
- Aug 14, 2025
Malicious code in ww-angular-toolbelt (npm)
- Aug 14, 2025
Malicious code in wvmarket (npm)
- Aug 14, 2025
Malicious code in wvdialer (npm)
- Aug 14, 2025
Malicious code in wux-ui (npm)
- Aug 14, 2025
Malicious code in wuthering (npm)
- Aug 14, 2025
Malicious code in wurfl-paypal (npm)
- Aug 14, 2025
Malicious code in wupnajvxqstkizlf (npm)
- Aug 14, 2025
Malicious code in wumdering (npm)
- Aug 14, 2025
Malicious code in wulver (npm)
- Aug 14, 2025
Malicious code in wukonga (npm)
- Aug 14, 2025
Malicious code in wubofan-renzhi-fangfalun-erlingyibayiling-yier (npm)
- Aug 14, 2025
Malicious code in wubofan-renzhi-fangfalun-erlingyibalingsi-lingliu (npm)
- Aug 14, 2025
Malicious code in wubofan-renzhi-fangfalun-erlingyibalingqi-lingjiu (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlingyiliulingwu-lingjiu (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlingyiliulingjiu-yier (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlingyijiulingyi-lingsi (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingyi-lingsi (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingwu-lingba (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingjiu-yier (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingyi-lingsi (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingwu-lingba (npm)
- Aug 14, 2025
Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingjiu-yier (npm)
- Aug 14, 2025
Malicious code in wtrsec (npm)
- Aug 14, 2025
Malicious code in wtfwsf (npm)
- Aug 14, 2025
Malicious code in wtfiwp (npm)
- Aug 14, 2025
Malicious code in wtails (npm)
- Aug 14, 2025
Malicious code in wsfutil (npm)
- Aug 14, 2025
Malicious code in wsbd.js (npm)
- Aug 14, 2025
Malicious code in ws-ui-tool (npm)
- Aug 14, 2025
Malicious code in writable-wavefunction-ceres-nebula (npm)
- Aug 14, 2025
Malicious code in writable-planckscale-local-redshift (npm)
- Aug 14, 2025
Malicious code in writable-gemini-pavo-jabbah (npm)
- Aug 14, 2025
Malicious code in writable-express-loopback-bioinformatics (npm)
- Aug 14, 2025
Malicious code in writable-asthenosphere-bellatrix-request (npm)
- Aug 14, 2025
Malicious code in writable-apollo-command-cryptography (npm)
- Aug 14, 2025
Malicious code in wretchdl (npm)
- Aug 14, 2025
Malicious code in wqertyu (npm)
- Aug 14, 2025
Malicious code in wptricks (npm)
- Aug 14, 2025
Malicious code in wpstitial (npm)
Page 5233 of 6,667