Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in web-i18 (npm)
- Aug 14, 2025
Malicious code in web-final-balance-fork-emulate (npm)
- Aug 14, 2025
Malicious code in web-driver-wrapper (npm)
- Aug 14, 2025
Malicious code in web-booking-2 (npm)
- Aug 14, 2025
Malicious code in web-bizops (npm)
- Aug 14, 2025
Malicious code in web-auth-client (npm)
- Aug 14, 2025
Malicious code in web-assets (npm)
- Aug 14, 2025
Malicious code in web-api-mongodb-connection-factory (npm)
- Aug 14, 2025
Malicious code in web-api-error (npm)
- Aug 14, 2025
Malicious code in web-admin (npm)
- Aug 14, 2025
Malicious code in web-accelerator (npm)
- Aug 14, 2025
Malicious code in weathy (npm)
- Aug 14, 2025
Malicious code in weatherz (npm)
- Aug 14, 2025
Malicious code in weather-cli-05-09-2023 (npm)
- Aug 14, 2025
Malicious code in weathem (npm)
- Aug 14, 2025
Malicious code in wearables (npm)
- Aug 14, 2025
Malicious code in weapp-vue (npm)
- Aug 14, 2025
Malicious code in weapp-react (npm)
- Aug 14, 2025
Malicious code in wdvmutciksljfyrp (npm)
- Aug 14, 2025
Malicious code in wduvjzgmkftesbln (npm)
- Aug 14, 2025
Malicious code in wdio-junit-reporter-file (npm)
- Aug 14, 2025
Malicious code in wdhag2727 (npm)
- Aug 14, 2025
Malicious code in wdhag12sa (npm)
- Aug 14, 2025
Malicious code in wdhag11 (npm)
- Aug 14, 2025
Malicious code in wdhag10 (npm)
- Aug 14, 2025
Malicious code in wdc-automation-framework (npm)
- Aug 14, 2025
Malicious code in wcklhqrkxfesdojy (npm)
- Aug 14, 2025
Malicious code in wcaxmsuydtqfjbng (npm)
- Aug 14, 2025
Malicious code in wboiesvkzkyjgxqd (npm)
- Aug 14, 2025
Malicious code in wbngclazsekkjmpr (npm)
- Aug 14, 2025
Malicious code in wb888new (npm)
- Aug 14, 2025
Malicious code in wb888 (npm)
- Aug 14, 2025
Malicious code in waxman (npm)
- Aug 14, 2025
Malicious code in wawan-sego63-kuki (npm)
- Aug 14, 2025
Malicious code in wawan-sambel39-breki (npm)
- Aug 14, 2025
Malicious code in wawan-ruwet53-breki (npm)
- Aug 14, 2025
Malicious code in wawan-ragi98-breki (npm)
- Aug 14, 2025
Malicious code in wawan-otak-otak81-sukiwir (npm)
- Aug 14, 2025
Malicious code in wawan-oblok85-breki (npm)
- Aug 14, 2025
Malicious code in wawan-lapis86-sukiwir (npm)
- Aug 14, 2025
Malicious code in wawan-lapis2-breki (npm)
- Aug 14, 2025
Malicious code in wawan-kue2-breki (npm)
- Aug 14, 2025
Malicious code in wawan-jengkol39-breki (npm)
- Aug 14, 2025
Malicious code in wawan-gembus11-breki (npm)
- Aug 14, 2025
Malicious code in wawan-bika60-breki (npm)
- Aug 14, 2025
Malicious code in wavy-logger (npm)
- Aug 14, 2025
Malicious code in wavy-dlp (npm)
- Aug 14, 2025
Malicious code in wavefunction-schema-draco-global (npm)
- Aug 14, 2025
Malicious code in wavefunction-rocket-mutation-json (npm)
- Aug 14, 2025
Malicious code in wavefunction-antd-dorado-mira (npm)
Page 5244 of 6,666