Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in watermelon-sig-project (npm)
- Aug 14, 2025
Malicious code in watermelon-redwood-nioz (npm)
- Aug 14, 2025
Malicious code in watermelon-papa-rjtb (npm)
- Aug 14, 2025
Malicious code in watermelon-oscar-jhii (npm)
- Aug 14, 2025
Malicious code in watermelon-orange-ewaj (npm)
- Aug 14, 2025
Malicious code in watermelon-orange-banana-bvwhi (npm)
- Aug 14, 2025
Malicious code in watermelon-nutmeg-3bx9 (npm)
- Aug 14, 2025
Malicious code in watermelon-november-zumw (npm)
- Aug 14, 2025
Malicious code in watermelon-november-victor-rffbi (npm)
- Aug 14, 2025
Malicious code in watermelon-november-ehrr (npm)
- Aug 14, 2025
Malicious code in watermelon-kilo-pyxs (npm)
- Aug 14, 2025
Malicious code in watermelon-i7k-project (npm)
- Aug 14, 2025
Malicious code in watermelon-hotel-papa-qeplf (npm)
- Aug 14, 2025
Malicious code in watermelon-hmz-project (npm)
- Aug 14, 2025
Malicious code in watermelon-grape-vurv (npm)
- Aug 14, 2025
Malicious code in watermelon-g5m-project (npm)
- Aug 14, 2025
Malicious code in watermelon-foxtrot-bajk (npm)
- Aug 14, 2025
Malicious code in watermelon-eo9-project (npm)
- Aug 14, 2025
Malicious code in watermelon-d4e-project (npm)
- Aug 14, 2025
Malicious code in watermelon-conifer-hubu (npm)
- Aug 14, 2025
Malicious code in watermelon-cherry-uxcq (npm)
- Aug 14, 2025
Malicious code in watermelon-bww-project (npm)
- Aug 14, 2025
Malicious code in watermelon-banana-oscar-otvit (npm)
- Aug 14, 2025
Malicious code in watermelon-b4z-project (npm)
- Aug 14, 2025
Malicious code in watermelon-apple-fubm (npm)
- Aug 14, 2025
Malicious code in watermelon-almond-gf7n (npm)
- Aug 14, 2025
Malicious code in watermelon-a3x-project (npm)
- Aug 14, 2025
Malicious code in watermelon-5si-project (npm)
- Aug 14, 2025
Malicious code in watermelon-57m-project (npm)
- Aug 14, 2025
Malicious code in watermelon-32q-project (npm)
- Aug 14, 2025
Malicious code in watermelon-2yv-project (npm)
- Aug 14, 2025
Malicious code in watermelon-1pt-project (npm)
- Aug 14, 2025
Malicious code in watermelon-0q8-project (npm)
- Aug 14, 2025
Malicious code in waterfall-zephyr-yaq820-project (npm)
- Aug 14, 2025
Malicious code in waterfall-yucca-fww745-project (npm)
- Aug 14, 2025
Malicious code in waterfall-xylophone-ezx711-project (npm)
- Aug 14, 2025
Malicious code in waterfall-vulture-ajq357-project (npm)
- Aug 14, 2025
Malicious code in waterfall-tiger-lcy744-project (npm)
- Aug 14, 2025
Malicious code in waterfall-thunder-zaw298-project (npm)
- Aug 14, 2025
Malicious code in waterfall-sunset-vqy611-project (npm)
- Aug 14, 2025
Malicious code in waterfall-spruce-sov598-project (npm)
- Aug 14, 2025
Malicious code in waterfall-reef-aal428-project (npm)
- Aug 14, 2025
Malicious code in waterfall-quill-wbc663-project (npm)
- Aug 14, 2025
Malicious code in waterfall-peony-sqm222-project (npm)
- Aug 14, 2025
Malicious code in waterfall-ocean-mpt094-project (npm)
- Aug 14, 2025
Malicious code in waterfall-nugget-mrm611-project (npm)
- Aug 14, 2025
Malicious code in waterfall-nimbus-bst529-project (npm)
- Aug 14, 2025
Malicious code in waterfall-koala-jjr057-project (npm)
- Aug 14, 2025
Malicious code in waterfall-kite-ieq692-project (npm)
- Aug 14, 2025
Malicious code in waterfall-kelp-vku005-project (npm)
Page 5246 of 6,666