Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in waterfall-kelp-tjt400-project (npm)
- Aug 14, 2025
Malicious code in waterfall-jungle-par221-project (npm)
- Aug 14, 2025
Malicious code in waterfall-jasmine-ufw145-project (npm)
- Aug 14, 2025
Malicious code in waterfall-iguana-qfk696-project (npm)
- Aug 14, 2025
Malicious code in waterfall-iguana-htu323-project (npm)
- Aug 14, 2025
Malicious code in waterfall-icicle-drv312-project (npm)
- Aug 14, 2025
Malicious code in waterfall-iceberg-ixu008-project (npm)
- Aug 14, 2025
Malicious code in waterfall-honey-mvl598-project (npm)
- Aug 14, 2025
Malicious code in waterfall-harbor-xkl008-project (npm)
- Aug 14, 2025
Malicious code in waterfall-frost-trg280-project (npm)
- Aug 14, 2025
Malicious code in waterfall-fjord-cyf003-project (npm)
- Aug 14, 2025
Malicious code in waterfall-fern-xfp240-project (npm)
- Aug 14, 2025
Malicious code in waterfall-elephant-nao511-project (npm)
- Aug 14, 2025
Malicious code in waterfall-crystal-ejr244-project (npm)
- Aug 14, 2025
Malicious code in waterfall-coral-tqt630-project (npm)
- Aug 14, 2025
Malicious code in waterfall-cascade-nlo372-project (npm)
- Aug 14, 2025
Malicious code in waterfall-butterfly-etn446-project (npm)
- Aug 14, 2025
Malicious code in water-tree-info-good-xml (npm)
- Aug 14, 2025
Malicious code in water-omicron-socket-phi-zeta (npm)
- Aug 14, 2025
Malicious code in watch-history-kcl (npm)
- Aug 14, 2025
Malicious code in watch-array (npm)
- Aug 14, 2025
Malicious code in washinton (npm)
- Aug 14, 2025
Malicious code in waseemdemo (npm)
- Aug 14, 2025
Malicious code in wasat-quantum-computing-tectonic-less-loader (npm)
- Aug 14, 2025
Malicious code in wasat-concurrently-delphinus-auriga (npm)
- Aug 14, 2025
Malicious code in wasat-cladistics-astrometry-carpo (npm)
- Aug 14, 2025
Malicious code in wasat-chakra-ui-neuromorphic-volcanology (npm)
- Aug 14, 2025
Malicious code in wasat-castor-toml-elektra (npm)
- Aug 14, 2025
Malicious code in wasabi-whiskey-1aqk (npm)
- Aug 14, 2025
Malicious code in wasabi-tangerine-a94m (npm)
- Aug 14, 2025
Malicious code in wasabi-papaya-dy32 (npm)
- Aug 14, 2025
Malicious code in wasabi-november-jo1d (npm)
- Aug 14, 2025
Malicious code in wasabi-jalapeno-4ze2 (npm)
- Aug 14, 2025
Malicious code in wasabi-flare-ju03 (npm)
- Aug 14, 2025
Malicious code in wasabi-conifer-3ys5 (npm)
- Aug 14, 2025
Malicious code in wasabi-alpha-xxqp (npm)
- Aug 14, 2025
Malicious code in warquiz (npm)
- Aug 14, 2025
Malicious code in warptable (npm)
- Aug 14, 2025
Malicious code in warplugin (npm)
- Aug 14, 2025
Malicious code in warpic (npm)
- Aug 14, 2025
Malicious code in warp-postcss-loader-jest-cosmicsilence (npm)
- Aug 14, 2025
Malicious code in warp-meteor-chakra-ui-levels (npm)
- Aug 14, 2025
Malicious code in warp-metabolomics-carpo-pulsar (npm)
- Aug 14, 2025
Malicious code in warp-blitz-biogeochemistry-stratigraphy (npm)
- Aug 14, 2025
Malicious code in warn-interface-kappa-wind-sed (npm)
- Aug 14, 2025
Malicious code in warn-cache-signal-validate-data (npm)
- Aug 14, 2025
Malicious code in wargame-rcon (npm)
- Aug 14, 2025
Malicious code in wardah (npm)
- Aug 14, 2025
Malicious code in war-robots-test-server-free-play466 (npm)
- Aug 14, 2025
Malicious code in war-robots-cost947 (npm)
Page 5247 of 6,666