Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in whale-quill-lll966-project (npm)
- Aug 14, 2025
Malicious code in whale-quail-rye498-project (npm)
- Aug 14, 2025
Malicious code in whale-octopus-kwx075-project (npm)
- Aug 14, 2025
Malicious code in whale-nymph-tgk558-project (npm)
- Aug 14, 2025
Malicious code in whale-nugget-xgr609-project (npm)
- Aug 14, 2025
Malicious code in whale-mangrove-ywp092-project (npm)
- Aug 14, 2025
Malicious code in whale-leopard-zgi909-project (npm)
- Aug 14, 2025
Malicious code in whale-kiwi-otw876-project (npm)
- Aug 14, 2025
Malicious code in whale-honeycomb-mro296-project (npm)
- Aug 14, 2025
Malicious code in whale-hill-dnp716-project (npm)
- Aug 14, 2025
Malicious code in whale-harbor-iwx983-project (npm)
- Aug 14, 2025
Malicious code in whale-gorge-kez279-project (npm)
- Aug 14, 2025
Malicious code in whale-glacier-zal870-project (npm)
- Aug 14, 2025
Malicious code in whale-ginger-svfn (npm)
- Aug 14, 2025
Malicious code in whale-fir-dh9k (npm)
- Aug 14, 2025
Malicious code in whale-falcon-uuo091-project (npm)
- Aug 14, 2025
Malicious code in whale-cascade-aup204-project (npm)
- Aug 14, 2025
Malicious code in whale-blossom-mjl177-project (npm)
- Aug 14, 2025
Malicious code in whale-aspen-zla441-project (npm)
- Aug 14, 2025
Malicious code in wgrandljiqtvkcbo (npm)
- Aug 14, 2025
Malicious code in wg-rblb-l10n (npm)
- Aug 14, 2025
Malicious code in wfm-constants (npm)
- Aug 14, 2025
Malicious code in wfitjdelyqxgcpor (npm)
- Aug 14, 2025
Malicious code in wfa_project (npm)
- Aug 14, 2025
Malicious code in wf-shell (npm)
- Aug 14, 2025
Malicious code in wezen-rimraf-markdown-hexo (npm)
- Aug 14, 2025
Malicious code in wezen-mensa-proxima-polaris (npm)
- Aug 14, 2025
Malicious code in wezen-enceladus-publish-darkenergy (npm)
- Aug 14, 2025
Malicious code in wezen-altair-antares-xanadu (npm)
- Aug 14, 2025
Malicious code in weywot-typeorm-andromeda-global (npm)
- Aug 14, 2025
Malicious code in weywot-subscription-mechatronics-miranda (npm)
- Aug 14, 2025
Malicious code in weywot-flare-pino-pretty-cache (npm)
- Aug 14, 2025
Malicious code in weywot-antimatter-terraforming-loglevel (npm)
- Aug 14, 2025
Malicious code in weswap (npm)
- Aug 14, 2025
Malicious code in westlife (npm)
- Aug 14, 2025
Malicious code in wespeople (npm)
- Aug 14, 2025
Malicious code in wespeke (npm)
- Aug 14, 2025
Malicious code in wesily (npm)
- Aug 14, 2025
Malicious code in weqeud (npm)
- Aug 14, 2025
Malicious code in wepoint (npm)
- Aug 14, 2025
Malicious code in wepack-cli (npm)
- Aug 14, 2025
Malicious code in weogeoapi (npm)
- Aug 14, 2025
Malicious code in wenzhixin (npm)
- Aug 14, 2025
Malicious code in wendao-zhongyi (npm)
- Aug 14, 2025
Malicious code in wemblibot (npm)
- Aug 14, 2025
Malicious code in welt-videoplayer (npm)
- Aug 14, 2025
Malicious code in welectron (npm)
- Aug 14, 2025
Malicious code in wekzchqtukvxmgpa (npm)
- Aug 14, 2025
Malicious code in weiyun (npm)
- Aug 14, 2025
Malicious code in weixin-widget (npm)
Page 5241 of 6,666