Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vxehrkjqfklcostn (npm)
- Aug 14, 2025
Malicious code in vwrxljgadmpbkzye (npm)
- Aug 14, 2025
Malicious code in vwfs-mustang (npm)
- Aug 14, 2025
Malicious code in vwfs-bronson (npm)
- Aug 14, 2025
Malicious code in vwesdhyijgnkkmpf (npm)
- Aug 14, 2025
Malicious code in vvre3 (npm)
- Aug 14, 2025
Malicious code in vvklee (npm)
- Aug 14, 2025
Malicious code in vvite-plugin-react-ping (npm)
- Aug 14, 2025
Malicious code in vve3 (npm)
- Aug 14, 2025
Malicious code in vvd3s (npm)
- Aug 14, 2025
Malicious code in vvd33 (npm)
- Aug 14, 2025
Malicious code in vuskbkaiozqjngcy (npm)
- Aug 14, 2025
Malicious code in vulture-zebra-cea002-project (npm)
- Aug 14, 2025
Malicious code in vulture-whale-rwz909-project (npm)
- Aug 14, 2025
Malicious code in vulture-waterfall-ifu407-project (npm)
- Aug 14, 2025
Malicious code in vulture-tundra-sty354-project (npm)
- Aug 14, 2025
Malicious code in vulture-thunder-nya877-project (npm)
- Aug 14, 2025
Malicious code in vulture-quagmire-kyh296-project (npm)
- Aug 14, 2025
Malicious code in vulture-opal-btd408-project (npm)
- Aug 14, 2025
Malicious code in vulture-octopus-bmk803-project (npm)
- Aug 14, 2025
Malicious code in vulture-jungle-jvs753-project (npm)
- Aug 14, 2025
Malicious code in vulture-jade-icp213-project (npm)
- Aug 14, 2025
Malicious code in vulture-iceberg-utp773-project (npm)
- Aug 14, 2025
Malicious code in vulture-galaxy-onl848-project (npm)
- Aug 14, 2025
Malicious code in vulture-dove-kmy948-project (npm)
- Aug 14, 2025
Malicious code in vulndb-service (npm)
- Aug 14, 2025
Malicious code in vuln (npm)
- Aug 14, 2025
Malicious code in vulcan-ux-core (npm)
- Aug 14, 2025
Malicious code in vulcan-rest-callback-jekyll (npm)
- Aug 14, 2025
Malicious code in vulcan-mocha-miranda-winston (npm)
- Aug 14, 2025
Malicious code in vulcan-jupiter-scripts-module (npm)
- Aug 14, 2025
Malicious code in vulcan-docusaurus-quark-mineralogy (npm)
- Aug 14, 2025
Malicious code in vulcan-augmentedreality-mui-taurus (npm)
- Aug 14, 2025
Malicious code in vuetify-superagent-eslint-config-spawn (npm)
- Aug 14, 2025
Malicious code in vuetify-sagitta-dactyl-framework (npm)
- Aug 14, 2025
Malicious code in vuetify-proteomics-biohacking-cors (npm)
- Aug 14, 2025
Malicious code in vuetify-jwt-pegasus-spawn (npm)
- Aug 14, 2025
Malicious code in vuetify-halley-aldebaran-radiant (npm)
- Aug 14, 2025
Malicious code in vuetify-electron-builder-pulsar-module (npm)
- Aug 14, 2025
Malicious code in vuetify-commitizen-prompts-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in vuetify-capella-hyperion-xenon (npm)
- Aug 14, 2025
Malicious code in vuepress-eris-ganymede-public (npm)
- Aug 14, 2025
Malicious code in vuepress-cosmicray-quantum-xenon (npm)
- Aug 14, 2025
Malicious code in vuepress-cosmicray-cypress-puppeteer (npm)
- Aug 14, 2025
Malicious code in vuepress-alphard-rate-limiter-spectron-webdriver (npm)
- Aug 14, 2025
Malicious code in vuekkzsl40dgoz6nwl9mhitpna5blxsk (npm)
- Aug 14, 2025
Malicious code in vue3-image-base64 (npm)
- Aug 14, 2025
Malicious code in vue-weapp (npm)
- Aug 14, 2025
Malicious code in vue-storefront-stripe (npm)
- Aug 14, 2025
Malicious code in vue-stock-chart (npm)
Page 5249 of 6,666