Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,292 total in npm · sorted newest first- Aug 14, 2025
Malicious code in wm-service (npm)
- Aug 14, 2025
Malicious code in wm-plugin-user-behavior (npm)
- Aug 14, 2025
Malicious code in wm-plugin-accessibility (npm)
- Aug 14, 2025
Malicious code in wlectron (npm)
- Aug 14, 2025
Malicious code in wlcamxiukfsyontg (npm)
- Aug 14, 2025
Malicious code in wjchart (npm)
- Aug 14, 2025
Malicious code in wjb313-regret-pack (npm)
- Aug 14, 2025
Malicious code in wizardcc (npm)
- Aug 14, 2025
Malicious code in wix-secrets-backend (npm)
- Aug 14, 2025
Malicious code in wix-elementory-globals (npm)
- Aug 14, 2025
Malicious code in wix-data (npm)
- Aug 14, 2025
Malicious code in witsguru (npm)
- Aug 14, 2025
Malicious code in with-relay-modern (npm)
- Aug 14, 2025
Malicious code in with-next (npm)
- Aug 14, 2025
Malicious code in witems (npm)
- Aug 14, 2025
Malicious code in wisp-zrpzi-r7ina-xenith-project (npm)
- Aug 14, 2025
Malicious code in wisp-zebra-aue294-project (npm)
- Aug 14, 2025
Malicious code in wisp-yonder-grg692-project (npm)
- Aug 14, 2025
Malicious code in wisp-yak-jjk951-project (npm)
- Aug 14, 2025
Malicious code in wisp-xanadu-nqk291-project (npm)
- Aug 14, 2025
Malicious code in wisp-xanadu-elm834-project (npm)
- Aug 14, 2025
Malicious code in wisp-urx2m-fo5m4-flora-project (npm)
- Aug 14, 2025
Malicious code in wisp-topaz-vhf135-project (npm)
- Aug 14, 2025
Malicious code in wisp-tide-jue264-project (npm)
- Aug 14, 2025
Malicious code in wisp-thunder-ufm916-project (npm)
- Aug 14, 2025
Malicious code in wisp-river-tyt962-project (npm)
- Aug 14, 2025
Malicious code in wisp-ripple-blt348-project (npm)
- Aug 14, 2025
Malicious code in wisp-quagmire-kmd762-project (npm)
- Aug 14, 2025
Malicious code in wisp-peony-rfc444-project (npm)
- Aug 14, 2025
Malicious code in wisp-lightning-cin551-project (npm)
- Aug 14, 2025
Malicious code in wisp-lagoon-ejj064-project (npm)
- Aug 14, 2025
Malicious code in wisp-jade-pjk232-project (npm)
- Aug 14, 2025
Malicious code in wisp-honey-ozq377-project (npm)
- Aug 14, 2025
Malicious code in wisp-hammock-blr819-project (npm)
- Aug 14, 2025
Malicious code in wisp-giraffe-rcj353-project (npm)
- Aug 14, 2025
Malicious code in wisp-falcon-xaj738-project (npm)
- Aug 14, 2025
Malicious code in wisp-aroma-ogl820-project (npm)
- Aug 14, 2025
Malicious code in wisp-acorn-cxq425-project (npm)
- Aug 14, 2025
Malicious code in wiservice (npm)
- Aug 14, 2025
Malicious code in wiseproxy (npm)
- Aug 14, 2025
Malicious code in wirly (npm)
- Aug 14, 2025
Malicious code in wirelust (npm)
- Aug 14, 2025
Malicious code in wiredev (npm)
- Aug 14, 2025
Malicious code in wiptrhvekugdsmkb (npm)
- Aug 14, 2025
Malicious code in wintool-save-transaction (npm)
- Aug 14, 2025
Malicious code in winstorm (npm)
- Aug 14, 2025
Malicious code in winston-paleomagnetism-redis-cypress (npm)
- Aug 14, 2025
Malicious code in winston-outercore-sagitta-mineralogy (npm)
- Aug 14, 2025
Malicious code in winston-lint-fornax-centaurus (npm)
- Aug 14, 2025
Malicious code in winston-jest-webdriver-mocha-stream (npm)
Page 5236 of 6,666