Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,292 total in npm · sorted newest first- Aug 14, 2025
Malicious code in willow-36eqv-uhzv7-lunar-project (npm)
- Aug 14, 2025
Malicious code in willow-1zazp-j5q5s-pearl-project (npm)
- Aug 14, 2025
Malicious code in willow-1w7vd-dwlwi-opal-project (npm)
- Aug 14, 2025
Malicious code in willitrun (npm)
- Aug 14, 2025
Malicious code in wildsex (npm)
- Aug 14, 2025
Malicious code in wikt-ng2-completer (npm)
- Aug 14, 2025
Malicious code in wikiutils (npm)
- Aug 14, 2025
Malicious code in wikispy (npm)
- Aug 14, 2025
Malicious code in wikiplus (npm)
- Aug 14, 2025
Malicious code in wigraph (npm)
- Aug 14, 2025
Malicious code in wifiht (npm)
- Aug 14, 2025
Malicious code in wifigazer (npm)
- Aug 14, 2025
Malicious code in wifesex (npm)
- Aug 14, 2025
Malicious code in wicked-external-roblox (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in wicked-external-fivem (npm)
1 compromised version
- Aug 14, 2025
Malicious code in wicked-executor (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in wibowo-rangi99-breki (npm)
- Aug 14, 2025
Malicious code in wibowo-pisang22-kuki (npm)
- Aug 14, 2025
Malicious code in wibowo-lapis17-breki (npm)
- Aug 14, 2025
Malicious code in wibowo-kue58-sukiwir (npm)
- Aug 14, 2025
Malicious code in wibowo-kue5-kuki (npm)
- Aug 14, 2025
Malicious code in wibowo-kemplang78-sukiwir (npm)
- Aug 14, 2025
Malicious code in whtpmg (npm)
- Aug 14, 2025
Malicious code in wholelot-storage-db (npm)
- Aug 14, 2025
Malicious code in wholelot-common-ui (npm)
- Aug 14, 2025
Malicious code in wholelot-business-common (npm)
- Aug 14, 2025
Malicious code in whoisthat (npm)
- Aug 14, 2025
Malicious code in whitney_production (npm)
- Aug 14, 2025
Malicious code in whiteproject (npm)
- Aug 14, 2025
Malicious code in whitelabelstarter (npm)
- Aug 14, 2025
Malicious code in whitedwarf-writable-mongodb-ophiuchus (npm)
- Aug 14, 2025
Malicious code in whitedwarf-kaus-auth0-membrane (npm)
- Aug 14, 2025
Malicious code in whitedwarf-commitizen-semantic-ui-heka (npm)
- Aug 14, 2025
Malicious code in whisper_r3v8x_kdu16_bloom (npm)
- Aug 14, 2025
Malicious code in whisper_m57j4_hztxg_vantage (npm)
- Aug 14, 2025
Malicious code in whisper_9kmlz_alm4j_raven (npm)
- Aug 14, 2025
Malicious code in whisper_1smx2_3yz0r_fern (npm)
- Aug 14, 2025
Malicious code in whisper-ycffo-bmsx3-grove-project (npm)
- Aug 14, 2025
Malicious code in whisper-voyage-ojz108-project (npm)
- Aug 14, 2025
Malicious code in whisper-u5gak-7630i-bison-project (npm)
- Aug 14, 2025
Malicious code in whisper-tzdh4-m9tux-bison-project (npm)
- Aug 14, 2025
Malicious code in whisper-t7zfb-ww7wk-zephyr-project (npm)
- Aug 14, 2025
Malicious code in whisper-s1wur-e794s-echo-project (npm)
- Aug 14, 2025
Malicious code in whisper-oiv8t-mdom4-ember-project (npm)
- Aug 14, 2025
Malicious code in whisper-mo1hj-yndrb-kelp-project (npm)
- Aug 14, 2025
Malicious code in whisper-m9pjo-p0hxg-paradise-project (npm)
- Aug 14, 2025
Malicious code in whisper-ljrnm-yo0np-reef-project (npm)
- Aug 14, 2025
Malicious code in whisper-3blww-juu29-mirage-project (npm)
- Aug 14, 2025
Malicious code in whisper-14mvi-6yw8r-serenity-project (npm)
- Aug 14, 2025
Malicious code in whiskey-zulu-kilo-nwxgc (npm)
Page 5238 of 6,666