Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in weiweier (npm)
- Aug 14, 2025
Malicious code in weiqianli-liuyao-zhanbu-jiangyi (npm)
- Aug 14, 2025
Malicious code in weiqianli-daliuren-quanji-fulu (npm)
- Aug 14, 2025
Malicious code in weiqianli-daliuren-quanji (npm)
- Aug 14, 2025
Malicious code in weioboard (npm)
- Aug 14, 2025
Malicious code in weighted-rating-trend-calculator (npm)
- Aug 14, 2025
Malicious code in weibfit (npm)
- Aug 14, 2025
Malicious code in weedmaps-ui (npm)
- Aug 14, 2025
Malicious code in wedeli (npm)
- Aug 14, 2025
Malicious code in webwewant (npm)
- Aug 14, 2025
Malicious code in webtypist (npm)
- Aug 14, 2025
Malicious code in webtrader (npm)
- Aug 14, 2025
Malicious code in webtoon-unlimited-coins-ios801 (npm)
- Aug 14, 2025
Malicious code in webtoon-unlimited-coins-ios502 (npm)
- Aug 14, 2025
Malicious code in webtoon-unlimited-coins-ios480 (npm)
- Aug 14, 2025
Malicious code in webtoon-coins-cost795 (npm)
- Aug 14, 2025
Malicious code in webtoon-coins-cost465 (npm)
- Aug 14, 2025
Malicious code in webtoon-coin-codes606 (npm)
- Aug 14, 2025
Malicious code in webtoon-coin-codes427 (npm)
- Aug 14, 2025
Malicious code in webteam-lc-template (npm)
- Aug 14, 2025
Malicious code in webtask-sequence-editor (npm)
- Aug 14, 2025
Malicious code in websounds (npm)
- Aug 14, 2025
Malicious code in websockets-pm2-standard-carpo (npm)
- Aug 14, 2025
Malicious code in website-bundle (npm)
- Aug 14, 2025
Malicious code in webside (npm)
- Aug 14, 2025
Malicious code in websgs (npm)
- Aug 14, 2025
Malicious code in webserver-internal-v2 (npm)
- Aug 14, 2025
Malicious code in webscaler (npm)
- Aug 14, 2025
Malicious code in webruntime-branding-shared (npm)
- Aug 14, 2025
Malicious code in webrtcmau (npm)
- Aug 14, 2025
Malicious code in webreplay (npm)
- Aug 14, 2025
Malicious code in webpyhero (npm)
- Aug 14, 2025
Malicious code in webptt (npm)
- Aug 14, 2025
Malicious code in webpinger0 (npm)
- Aug 14, 2025
Malicious code in webpay-webserviceAPI (npm)
- Aug 14, 2025
Malicious code in webpaste (npm)
- Aug 14, 2025
Malicious code in webpack-xenon-registry-biohacking (npm)
- Aug 14, 2025
Malicious code in webpack-test (npm)
- Aug 14, 2025
Malicious code in webpack-sever-render-middleware (npm)
- Aug 14, 2025
Malicious code in webpack-rimraf-plugin (npm)
- Aug 14, 2025
Malicious code in webpack-public-path-plugin (npm)
- Aug 14, 2025
Malicious code in webpack-protractor-mongodb-frontend (npm)
- Aug 14, 2025
Malicious code in webpack-project-boilerplate (npm)
- Aug 14, 2025
Malicious code in webpack-phoebe-warp-jwt (npm)
- Aug 14, 2025
Malicious code in webpack-optimize-css-assets-webpack-plugin-xenon-enif (npm)
- Aug 14, 2025
Malicious code in webpack-lithosphere-playwright-altair (npm)
- Aug 14, 2025
Malicious code in webpack-levels (npm)
- Aug 14, 2025
Malicious code in webpack-lepton-xenos-subscription (npm)
- Aug 14, 2025
Malicious code in webpack-karma-electron-builder-neuromorphic (npm)
- Aug 14, 2025
Malicious code in webpack-jupiter-nova-graphql (npm)
Page 5242 of 6,666