Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vue-rt-style-kit-aks (npm)
- Aug 14, 2025
Malicious code in vue-pwa (npm)
- Aug 14, 2025
Malicious code in vue-multiselect-grid (npm)
- Aug 14, 2025
Malicious code in vue-design-system (npm)
- Aug 14, 2025
Malicious code in vue-custom-directives (npm)
- Aug 14, 2025
Malicious code in vue-cli-nb-no (npm)
- Aug 14, 2025
Malicious code in vue-build-no-ssr (npm)
- Aug 14, 2025
Malicious code in vtigerpy (npm)
- Aug 14, 2025
Malicious code in vtexjson (npm)
- Aug 14, 2025
Malicious code in vteayizknuflwbqo (npm)
- Aug 14, 2025
Malicious code in vt-shaver (npm)
- Aug 14, 2025
Malicious code in vstyleu (npm)
- Aug 14, 2025
Malicious code in vsth0hbao36u7fgji617larsov7xwdvk (npm)
- Aug 14, 2025
Malicious code in vslearn (npm)
- Aug 14, 2025
Malicious code in vsgaleria (npm)
- Aug 14, 2025
Malicious code in vsfs3 (npm)
- Aug 14, 2025
Malicious code in vscode.markdown-it-renderer (npm)
1 compromised version
- Aug 14, 2025
Malicious code in vscode-reh (npm)
- Aug 14, 2025
Malicious code in vscode-notebook-renderer (npm)
1 compromised version
- Aug 14, 2025
Malicious code in vscode-mssql (npm)
- Aug 14, 2025
Malicious code in vscode-import-sort (npm)
- Aug 14, 2025
Malicious code in vscode-extend (npm)
- Aug 14, 2025
Malicious code in vscode-antlr4 (npm)
- Aug 14, 2025
Malicious code in vs43 (npm)
- Aug 14, 2025
Malicious code in vrwykstuokzpigda (npm)
- Aug 14, 2025
Malicious code in vrt3fg (npm)
- Aug 14, 2025
Malicious code in vrp-tools (npm)
- Aug 14, 2025
Malicious code in vrivera (npm)
- Aug 14, 2025
Malicious code in vrger3 (npm)
- Aug 14, 2025
Malicious code in vrg34 (npm)
- Aug 14, 2025
Malicious code in vrfi-schedules (npm)
- Aug 14, 2025
Malicious code in vrfi-cal-registration (npm)
- Aug 14, 2025
Malicious code in vrfger3 (npm)
- Aug 14, 2025
Malicious code in vrenv (npm)
- Aug 14, 2025
Malicious code in vreb3 (npm)
- Aug 14, 2025
Malicious code in vre43 (npm)
- Aug 14, 2025
Malicious code in vrcumeyqnjsiwgkd (npm)
- Aug 14, 2025
Malicious code in vranges (npm)
- Aug 14, 2025
Malicious code in vr-lib (npm)
- Aug 14, 2025
Malicious code in vquywzoakjtfnsmr (npm)
- Aug 14, 2025
Malicious code in vqkslritnjhyeugo (npm)
- Aug 14, 2025
Malicious code in vqasmdufyhwlcezb (npm)
- Aug 14, 2025
Malicious code in vpxkjfnugtzidesw (npm)
- Aug 14, 2025
Malicious code in vpvoci (npm)
- Aug 14, 2025
Malicious code in vprwbysfktadghne (npm)
- Aug 14, 2025
Malicious code in vpatdnhbukmgjqrs (npm)
- Aug 14, 2025
Malicious code in voyage_ysitn_il0e7_plume (npm)
- Aug 14, 2025
Malicious code in voyage_vx4ld_okb49_antelope (npm)
- Aug 14, 2025
Malicious code in voyage_n9ghc_ap6yr_twilight (npm)
- Aug 14, 2025
Malicious code in voyage_izoit_pm39d_wind (npm)
Page 5250 of 6,666