Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in wave_tyu8x_x2a31_solstice (npm)
- Aug 14, 2025
Malicious code in wave_o59gf_pi3i5_paradise (npm)
- Aug 14, 2025
Malicious code in wave_gv70z_xtn54_rainbow (npm)
- Aug 14, 2025
Malicious code in wave_70v4j_6mkok_cascade (npm)
- Aug 14, 2025
Malicious code in wave_0z6qd_6vibr_reef (npm)
- Aug 14, 2025
Malicious code in wave-willow-dlr076-project (npm)
- Aug 14, 2025
Malicious code in wave-w3b5h-zr3yf-harmony-project (npm)
- Aug 14, 2025
Malicious code in wave-uranium-byk689-project (npm)
- Aug 14, 2025
Malicious code in wave-tornado-dsj415-project (npm)
- Aug 14, 2025
Malicious code in wave-star-zkn130-project (npm)
- Aug 14, 2025
Malicious code in wave-prairie-kdx541-project (npm)
- Aug 14, 2025
Malicious code in wave-prairie-hjh040-project (npm)
- Aug 14, 2025
Malicious code in wave-orangutan-xax006-project (npm)
- Aug 14, 2025
Malicious code in wave-opal-jal356-project (npm)
- Aug 14, 2025
Malicious code in wave-op515-gfojq-willow-project (npm)
- Aug 14, 2025
Malicious code in wave-moose-drr853-project (npm)
- Aug 14, 2025
Malicious code in wave-koala-fzc264-project (npm)
- Aug 14, 2025
Malicious code in wave-kaleidoscope-dcc117-project (npm)
- Aug 14, 2025
Malicious code in wave-k5s1h-twv5o-throne-project (npm)
- Aug 14, 2025
Malicious code in wave-jungle-dra062-project (npm)
- Aug 14, 2025
Malicious code in wave-hedgehog-ruv258-project (npm)
- Aug 14, 2025
Malicious code in wave-harbor-zsm497-project (npm)
- Aug 14, 2025
Malicious code in wave-dolphin-uul508-project (npm)
- Aug 14, 2025
Malicious code in wave-cherry-hxt428-project (npm)
- Aug 14, 2025
Malicious code in wave-caravan-sis173-project (npm)
- Aug 14, 2025
Malicious code in wave-butterfly-afj528-project (npm)
- Aug 14, 2025
Malicious code in wave-5gjf7-ho674-indigo-project (npm)
- Aug 14, 2025
Malicious code in wati-semur59-kuki (npm)
- Aug 14, 2025
Malicious code in wati-sambalado60-sukiwir (npm)
- Aug 14, 2025
Malicious code in wati-lepet43-breki (npm)
- Aug 14, 2025
Malicious code in wati-kemplang55-sukiwir (npm)
- Aug 14, 2025
Malicious code in wati-empal44-breki (npm)
- Aug 14, 2025
Malicious code in wati-botok93-sukiwir (npm)
- Aug 14, 2025
Malicious code in waterplus (npm)
- Aug 14, 2025
Malicious code in watermelon-zucchini-eilj (npm)
- Aug 14, 2025
Malicious code in watermelon-zenith-3fd5 (npm)
- Aug 14, 2025
Malicious code in watermelon-ymh-project (npm)
- Aug 14, 2025
Malicious code in watermelon-yam-uniform-aepvd (npm)
- Aug 14, 2025
Malicious code in watermelon-yam-kiwi-xiunr (npm)
- Aug 14, 2025
Malicious code in watermelon-xigua-zulu-kaflb (npm)
- Aug 14, 2025
Malicious code in watermelon-w7m-project (npm)
- Aug 14, 2025
Malicious code in watermelon-victor-nectarine-jkhak (npm)
- Aug 14, 2025
Malicious code in watermelon-vdg-project (npm)
- Aug 14, 2025
Malicious code in watermelon-vanilla-zulu-fpnib (npm)
- Aug 14, 2025
Malicious code in watermelon-vanilla-zorw (npm)
- Aug 14, 2025
Malicious code in watermelon-vanilla-hotel-mrnkc (npm)
- Aug 14, 2025
Malicious code in watermelon-uniform-xk4i (npm)
- Aug 14, 2025
Malicious code in watermelon-tg5-project (npm)
- Aug 14, 2025
Malicious code in watermelon-tango-foxtrot-aedcd (npm)
- Aug 14, 2025
Malicious code in watermelon-t9k-project (npm)
Page 5245 of 6,666