Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vk-hr-tek (npm)
- Aug 14, 2025
Malicious code in vjzual (npm)
- Aug 14, 2025
Malicious code in vizthis (npm)
- Aug 14, 2025
Malicious code in vizi-dashboard (npm)
- Aug 14, 2025
Malicious code in viy (npm)
- Aug 14, 2025
Malicious code in vixinet (npm)
- Aug 14, 2025
Malicious code in vivid-shimmer-dqh065-project (npm)
- Aug 14, 2025
Malicious code in vitestjs (npm)
- Aug 14, 2025
Malicious code in vite-styled-kit (npm)
- Aug 14, 2025
Malicious code in vite-singleparse (npm)
- Aug 14, 2025
Malicious code in vite-plugin-react-ping (npm)
- Aug 14, 2025
Malicious code in vite-plugin-image-loader (npm)
- Aug 14, 2025
Malicious code in vite-parse (npm)
- Aug 14, 2025
Malicious code in vite-default (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in vite-css-icon (npm)
7 compromised versions
- Aug 14, 2025
Malicious code in visualize-warn-finally-bash-final (npm)
- Aug 14, 2025
Malicious code in visualize-compile-thread-web-info (npm)
- Aug 14, 2025
Malicious code in vistrails (npm)
- Aug 14, 2025
Malicious code in visto-web-core (npm)
- Aug 14, 2025
Malicious code in vista_x3zzy_kmhvk_honey (npm)
- Aug 14, 2025
Malicious code in vista_v5jbm_amq3m_fireworks (npm)
- Aug 14, 2025
Malicious code in vista_rsb0k_k28v4_nectar (npm)
- Aug 14, 2025
Malicious code in vista_g5thn_h5o4f_zephyr (npm)
- Aug 14, 2025
Malicious code in vista_elomg_c43p4_kryptonite (npm)
- Aug 14, 2025
Malicious code in vista_5d1y1_gcdpr_opal (npm)
- Aug 14, 2025
Malicious code in vista_54gq0_uy3oj_jasmine (npm)
- Aug 14, 2025
Malicious code in vista_0xk1t_tj3ju_yew (npm)
- Aug 14, 2025
Malicious code in vista-zebra-pzr214-project (npm)
- Aug 14, 2025
Malicious code in vista-valley-kls414-project (npm)
- Aug 14, 2025
Malicious code in vista-thistle-cjn295-project (npm)
- Aug 14, 2025
Malicious code in vista-rnkzn-a4lyc-quartz-project (npm)
- Aug 14, 2025
Malicious code in vista-ripple-fcc476-project (npm)
- Aug 14, 2025
Malicious code in vista-quasar-guu167-project (npm)
- Aug 14, 2025
Malicious code in vista-qrf9s-6ykky-yellow-project (npm)
- Aug 14, 2025
Malicious code in vista-pvyte-je2v2-alchemy-project (npm)
- Aug 14, 2025
Malicious code in vista-ocean-qkx446-project (npm)
- Aug 14, 2025
Malicious code in vista-oak-kvj235-project (npm)
- Aug 14, 2025
Malicious code in vista-nocturne-ver278-project (npm)
- Aug 14, 2025
Malicious code in vista-nectar-nrv586-project (npm)
- Aug 14, 2025
Malicious code in vista-kw3mh-gm735-star-project (npm)
- Aug 14, 2025
Malicious code in vista-kite-kcw397-project (npm)
- Aug 14, 2025
Malicious code in vista-kelp-oue246-project (npm)
- Aug 14, 2025
Malicious code in vista-kelp-fcm243-project (npm)
- Aug 14, 2025
Malicious code in vista-jellyfish-iqr703-project (npm)
- Aug 14, 2025
Malicious code in vista-galaxy-arg292-project (npm)
- Aug 14, 2025
Malicious code in vista-falcon-jsr611-project (npm)
- Aug 14, 2025
Malicious code in vista-falcon-crn276-project (npm)
- Aug 14, 2025
Malicious code in vista-f1m2p-zkz6k-fable-project (npm)
- Aug 14, 2025
Malicious code in vista-everest-yvt509-project (npm)
- Aug 14, 2025
Malicious code in vista-everest-wat379-project (npm)
Page 5253 of 6,666