Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,292 total in npm · sorted newest first- Aug 14, 2025
Malicious code in work-cpu-app (npm)
- Aug 14, 2025
Malicious code in work-cpu (npm)
- Aug 14, 2025
Malicious code in worjwot (npm)
- Aug 14, 2025
Malicious code in wordmist (npm)
- Aug 14, 2025
Malicious code in wordll (npm)
- Aug 14, 2025
Malicious code in wordflash (npm)
- Aug 14, 2025
Malicious code in wordfill (npm)
- Aug 14, 2025
Malicious code in worddaily (npm)
- Aug 14, 2025
Malicious code in wordbone (npm)
- Aug 14, 2025
Malicious code in wordatron (npm)
- Aug 14, 2025
Malicious code in word2pdf (npm)
- Aug 14, 2025
Malicious code in woprbot (npm)
- Aug 14, 2025
Malicious code in woosah (npm)
- Aug 14, 2025
Malicious code in woopwoop (npm)
- Aug 14, 2025
Malicious code in woopenurl (npm)
- Aug 14, 2025
Malicious code in woonro (npm)
- Aug 14, 2025
Malicious code in wonderflow-date-utils (npm)
- Aug 14, 2025
Malicious code in wonderflow-api (npm)
- Aug 14, 2025
Malicious code in wonderfilter (npm)
- Aug 14, 2025
Malicious code in womaime (npm)
- Aug 14, 2025
Malicious code in wolt-permissions (npm)
- Aug 14, 2025
Malicious code in wolski (npm)
- Aug 14, 2025
Malicious code in wolf-thermochronology-europa-chakra-ui (npm)
- Aug 14, 2025
Malicious code in wolf-cache-inflation-selenium (npm)
- Aug 14, 2025
Malicious code in wolf-arcturus-parcel-juno (npm)
- Aug 14, 2025
Malicious code in wolchara (npm)
- Aug 14, 2025
Malicious code in wojiushi-yaojiaonie (npm)
- Aug 14, 2025
Malicious code in wojilu (npm)
- Aug 14, 2025
Malicious code in wohvubsaemxdjkrt (npm)
- Aug 14, 2025
Malicious code in wofipnuazmdkylht (npm)
- Aug 14, 2025
Malicious code in wodpmitjhkxrynkv (npm)
- Aug 14, 2025
Malicious code in wodhopper (npm)
- Aug 14, 2025
Malicious code in wodahbot (npm)
- Aug 14, 2025
Malicious code in wng-sportsnet (npm)
- Aug 14, 2025
Malicious code in wng-live-avail (npm)
- Aug 14, 2025
Malicious code in wng-fsgo (npm)
- Aug 14, 2025
Malicious code in wng-fastpass (npm)
- Aug 14, 2025
Malicious code in wndresize (npm)
- Aug 14, 2025
Malicious code in wmuqljifnothaksc (npm)
- Aug 14, 2025
Malicious code in wmulykjipvkhagdq (npm)
- Aug 14, 2025
Malicious code in wmtxogslanzykdue (npm)
- Aug 14, 2025
Malicious code in wms-web-ui (npm)
- Aug 14, 2025
Malicious code in wms-mobile-styles (npm)
- Aug 14, 2025
Malicious code in wms-capabilities-parser (npm)
- Aug 14, 2025
Malicious code in wmpchart (npm)
- Aug 14, 2025
Malicious code in wminput (npm)
- Aug 14, 2025
Malicious code in wmhistory (npm)
- Aug 14, 2025
Malicious code in wmdnrzxkeviufbhc (npm)
- Aug 14, 2025
Malicious code in wmarinn (npm)
- Aug 14, 2025
Malicious code in wm-visual-composer-types (npm)
Page 5235 of 6,666