Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,292 total in npm · sorted newest first- Aug 14, 2025
Malicious code in whiskey-banana-ofpc (npm)
- Aug 14, 2025
Malicious code in whiskey-banana-echo-loicw (npm)
- Aug 14, 2025
Malicious code in whiskey-az2-project (npm)
- Aug 14, 2025
Malicious code in whiskey-apple-mike-ihspg (npm)
- Aug 14, 2025
Malicious code in whiskey-9q7-project (npm)
- Aug 14, 2025
Malicious code in whiskey-8co-project (npm)
- Aug 14, 2025
Malicious code in whiskey-828-project (npm)
- Aug 14, 2025
Malicious code in whiskey-7vn-project (npm)
- Aug 14, 2025
Malicious code in whiskey-7dw-project (npm)
- Aug 14, 2025
Malicious code in whiskey-6hz-project (npm)
- Aug 14, 2025
Malicious code in whiskey-5jj-project (npm)
- Aug 14, 2025
Malicious code in whiskey-4mc-project (npm)
- Aug 14, 2025
Malicious code in whiskey-4e7-project (npm)
- Aug 14, 2025
Malicious code in whiskey-2h4-project (npm)
- Aug 14, 2025
Malicious code in whiskey-2ap-project (npm)
- Aug 14, 2025
Malicious code in whiskey-164-project (npm)
- Aug 14, 2025
Malicious code in whirlwind_pba87_jfrqn_glow (npm)
- Aug 14, 2025
Malicious code in whirlwind_iszwq_295v5_lily (npm)
- Aug 14, 2025
Malicious code in whirlwind_b367k_y23zg_bramble (npm)
- Aug 14, 2025
Malicious code in whirlwind_3mtia_4dosy_quintessence (npm)
- Aug 14, 2025
Malicious code in whirlpool_opq28_z0uli_heather (npm)
- Aug 14, 2025
Malicious code in whirlpool_bkv4d_1suqb_yosemite (npm)
- Aug 14, 2025
Malicious code in whirlpool_5uyux_aagbo_kestrel (npm)
- Aug 14, 2025
Malicious code in whirlpool_2dv2u_52bpd_nectar (npm)
- Aug 14, 2025
Malicious code in whirlpool-zenith-pjh894-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-yucca-fyi102-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-yawn-tcl905-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-reef-pgo769-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-quilt-kqb461-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-nebula-wii811-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-lilac-hzi541-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-kiwi-boe743-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-kite-yvk901-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-kite-gfa567-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-hill-fyz742-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-elephant-xmr620-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-eagle-zif875-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-dune-jzk072-project (npm)
- Aug 14, 2025
Malicious code in whirlpool-cascade-upu258-project (npm)
- Aug 14, 2025
Malicious code in whipdf (npm)
- Aug 14, 2025
Malicious code in whfdzeurnmylokax (npm)
- Aug 14, 2025
Malicious code in whbmvlhtkasdglfjaiudgpytahft5nn8 (npm)
- Aug 14, 2025
Malicious code in whatsphp (npm)
- Aug 14, 2025
Malicious code in whatson (npm)
- Aug 14, 2025
Malicious code in whatsapp-nodejs (npm)
- Aug 14, 2025
Malicious code in whatnot (npm)
- Aug 14, 2025
Malicious code in whatclick (npm)
- Aug 14, 2025
Malicious code in whamrckyvpnbeliq (npm)
- Aug 14, 2025
Malicious code in whale-zodiac-rig382-project (npm)
- Aug 14, 2025
Malicious code in whale-xerox-riu551-project (npm)
Page 5240 of 6,666