Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in war-robots-cost454 (npm)
- Aug 14, 2025
Malicious code in wanweigang-jingying-rike-erlingyijiulingsan-lingwu (npm)
- Aug 14, 2025
Malicious code in wanweigang-jingying-rike-erlingyijiulingliu-lingba (npm)
- Aug 14, 2025
Malicious code in wanneng-yingli-beizeng-moshi (npm)
- Aug 14, 2025
Malicious code in wangting (npm)
- Aug 14, 2025
Malicious code in wangshan (npm)
- Aug 14, 2025
Malicious code in wanfa-jianshi (npm)
- Aug 14, 2025
Malicious code in wandx-api (npm)
- Aug 14, 2025
Malicious code in wandrlst (npm)
- Aug 14, 2025
Malicious code in wandergl (npm)
- Aug 14, 2025
Malicious code in wander_rtgtl_as13k_quintessence (npm)
- Aug 14, 2025
Malicious code in wander_nc46j_faoxm_twilight (npm)
- Aug 14, 2025
Malicious code in wander_l457u_9ovol_lullaby (npm)
- Aug 14, 2025
Malicious code in wander_gvol8_2jg5b_velocity (npm)
- Aug 14, 2025
Malicious code in wander_fcevl_h1cx5_realm (npm)
- Aug 14, 2025
Malicious code in wander_facms_crk6c_drizzle (npm)
- Aug 14, 2025
Malicious code in wander_d7etn_6kz0o_quiver (npm)
- Aug 14, 2025
Malicious code in wander_cy2k9_brmst_snow (npm)
- Aug 14, 2025
Malicious code in wander_2t3vp_2feik_horizon (npm)
- Aug 14, 2025
Malicious code in wander_285du_ewsj1_zephyr (npm)
- Aug 14, 2025
Malicious code in wander-snfbk-yyr2n-glow-project (npm)
- Aug 14, 2025
Malicious code in walnut-udon-6v91 (npm)
- Aug 14, 2025
Malicious code in walnut-tornado-tsch (npm)
- Aug 14, 2025
Malicious code in walnut-kayak-hpj5 (npm)
- Aug 14, 2025
Malicious code in walnut-jungle-hjsq (npm)
- Aug 14, 2025
Malicious code in walnut-drone-endr (npm)
- Aug 14, 2025
Malicious code in wallphp (npm)
- Aug 14, 2025
Malicious code in wallhawk (npm)
- Aug 14, 2025
Malicious code in walletsettings-paypal (npm)
- Aug 14, 2025
Malicious code in walletfi-paypal (npm)
- Aug 14, 2025
Malicious code in walletbalanceprovider (npm)
- Aug 14, 2025
Malicious code in walletactivitysearch-paypal (npm)
- Aug 14, 2025
Malicious code in walkme-ui-template (npm)
- Aug 14, 2025
Malicious code in waldboost (npm)
- Aug 14, 2025
Malicious code in walawe (npm)
- Aug 14, 2025
Malicious code in wajihah (npm)
- Aug 14, 2025
Malicious code in waiqin (npm)
- Aug 14, 2025
Malicious code in wafflet (npm)
- Aug 14, 2025
Malicious code in waffle-cone (npm)
- Aug 14, 2025
Malicious code in waddell (npm)
- Aug 14, 2025
Malicious code in waaass (npm)
- Aug 14, 2025
Malicious code in wa-ret-rop (npm)
- Aug 14, 2025
Malicious code in w56ai8 (npm)
- Aug 14, 2025
Malicious code in w2gv6j (npm)
- Aug 14, 2025
Malicious code in W2G2 (npm)
- Aug 14, 2025
Malicious code in w1kt-ngx-slimscroll (npm)
- Aug 14, 2025
Malicious code in w11k-select-ngx-adapter (npm)
- Aug 14, 2025
Malicious code in vywdojmfakbuekqc (npm)
- Aug 14, 2025
Malicious code in vykony (npm)
- Aug 14, 2025
Malicious code in vxyqhpbmkljiasgz (npm)
Page 5248 of 6,666