Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,292 total in npm · sorted newest first- Aug 14, 2025
Malicious code in woxzdsfgaqutybnh (npm)
- Aug 14, 2025
Malicious code in wowselect (npm)
- Aug 14, 2025
Malicious code in wowo-dev-cdbs (npm)
- Aug 14, 2025
Malicious code in wowo (npm)
- Aug 14, 2025
Malicious code in wowhelp (npm)
- Aug 14, 2025
Malicious code in wowacp (npm)
- Aug 14, 2025
Malicious code in wouldupay (npm)
- Aug 14, 2025
Malicious code in wotpapp (npm)
- Aug 14, 2025
Malicious code in wotevr (npm)
- Aug 14, 2025
Malicious code in wotaku (npm)
- Aug 14, 2025
Malicious code in wortru (npm)
- Aug 14, 2025
Malicious code in wormhole-superflare-quasar-antares (npm)
- Aug 14, 2025
Malicious code in wormhole-steganography-prettier-eclipse (npm)
- Aug 14, 2025
Malicious code in wormhole-galaxy-parcel-ultra (npm)
- Aug 14, 2025
Malicious code in wormhole-date-9u0f (npm)
- Aug 14, 2025
Malicious code in worldnews (npm)
- Aug 14, 2025
Malicious code in worldli (npm)
- Aug 14, 2025
Malicious code in worldcoin-developer-portal (npm)
- Aug 14, 2025
Malicious code in world-counter (npm)
- Aug 14, 2025
Malicious code in workspaces-shadow-example (npm)
- Aug 14, 2025
Malicious code in worksif (npm)
- Aug 14, 2025
Malicious code in working-new-coin-master-spins-generator-2023-for-free-dskldz (npm)
- Aug 14, 2025
Malicious code in working-fortnite-vbucks-generator-free-jdefg (npm)
- Aug 14, 2025
Malicious code in working-asphalt-9-legends-credits-generator (npm)
- Aug 14, 2025
Malicious code in working-ark-survival-primal-pass-generator (npm)
- Aug 14, 2025
Malicious code in worker-common (npm)
- Aug 14, 2025
Malicious code in workcode (npm)
- Aug 14, 2025
Malicious code in work-cpu-process880 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process88 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process840 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process8 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process64 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process620 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process520 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process480 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process4 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process360 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process320 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process240 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process2 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process180 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process14 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process120 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process12 (npm)
- Aug 14, 2025
Malicious code in work-cpu-process-web-web-web-web-web (npm)
- Aug 14, 2025
Malicious code in work-cpu-process-web-web-web-web (npm)
- Aug 14, 2025
Malicious code in work-cpu-process-web-web-web (npm)
- Aug 14, 2025
Malicious code in work-cpu-process-web-web (npm)
- Aug 14, 2025
Malicious code in work-cpu-process-web (npm)
- Aug 14, 2025
Malicious code in work-cpu-process (npm)
Page 5234 of 6,666