Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vista-epqim-dkbip-echo-project (npm)
- Aug 14, 2025
Malicious code in vista-dandelion-qzd076-project (npm)
- Aug 14, 2025
Malicious code in vista-cloud-lcp858-project (npm)
- Aug 14, 2025
Malicious code in vista-buffalo-juy305-project (npm)
- Aug 14, 2025
Malicious code in vista-6r6vs-v7mdt-solace-project (npm)
- Aug 14, 2025
Malicious code in vista-4ihgr-hw2yp-whisper-project (npm)
- Aug 14, 2025
Malicious code in vista-4gera-l3bm1-essence-project (npm)
- Aug 14, 2025
Malicious code in vista-43y5l-nyy4s-serenity-project (npm)
- Aug 14, 2025
Malicious code in visningsdefinisjoner-og-tekster (npm)
- Aug 14, 2025
Malicious code in visitmgt (npm)
- Aug 14, 2025
Malicious code in visiondb (npm)
- Aug 14, 2025
Malicious code in visarch (npm)
- Aug 14, 2025
Malicious code in visa (npm)
- Aug 14, 2025
Malicious code in vis-common-lib (npm)
- Aug 14, 2025
Malicious code in virus.exe (npm)
- Aug 14, 2025
Malicious code in virtualreality-forever-parsec-eridanus (npm)
- Aug 14, 2025
Malicious code in virtualize-long-deserialize-permission-user (npm)
- Aug 14, 2025
Malicious code in virtualize-encode-fire-sudo-finally (npm)
- Aug 14, 2025
Malicious code in virtualize-balance-lambda-pipe-validate (npm)
- Aug 14, 2025
Malicious code in virtual-glue (npm)
- Aug 14, 2025
Malicious code in virtsnmp (npm)
- Aug 14, 2025
Malicious code in virgo-jwt-style-loader-titan (npm)
- Aug 14, 2025
Malicious code in virgo-got-sass-loader-spica (npm)
- Aug 14, 2025
Malicious code in virgo-exoplanet-phoebe-coronalmassejection (npm)
- Aug 14, 2025
Malicious code in virgo-callisto-phylogenetics-janus (npm)
- Aug 14, 2025
Malicious code in virgo-astro-express-markdown-pdf (npm)
- Aug 14, 2025
Malicious code in violin-script-sdk (npm)
- Aug 14, 2025
Malicious code in violin-common (npm)
- Aug 14, 2025
Malicious code in violet-zeppelin-eow428-project (npm)
- Aug 14, 2025
Malicious code in violet-zebra-hom518-project (npm)
- Aug 14, 2025
Malicious code in violet-yucca-sic500-project (npm)
- Aug 14, 2025
Malicious code in violet-yucca-lrr553-project (npm)
- Aug 14, 2025
Malicious code in violet-yellow-kog634-project (npm)
- Aug 14, 2025
Malicious code in violet-yearling-p4xx (npm)
- Aug 14, 2025
Malicious code in violet-xylophone-nvs743-project (npm)
- Aug 14, 2025
Malicious code in violet-xylophone-fno271-project (npm)
- Aug 14, 2025
Malicious code in violet-xerus-oru353-project (npm)
- Aug 14, 2025
Malicious code in violet-xenon-rek483-project (npm)
- Aug 14, 2025
Malicious code in violet-umbrella-mbh930-project (npm)
- Aug 14, 2025
Malicious code in violet-tundra-adq515-project (npm)
- Aug 14, 2025
Malicious code in violet-sapphire-umq991-project (npm)
- Aug 14, 2025
Malicious code in violet-ripple-gxt894-project (npm)
- Aug 14, 2025
Malicious code in violet-r6v0j-jw2g3-phoenix-project (npm)
- Aug 14, 2025
Malicious code in violet-quince-qgzw (npm)
- Aug 14, 2025
Malicious code in violet-o0ch6-eicsu-kismet-project (npm)
- Aug 14, 2025
Malicious code in violet-ndozq-hy24z-iris-project (npm)
- Aug 14, 2025
Malicious code in violet-kayak-1bsu (npm)
- Aug 14, 2025
Malicious code in violet-jasmine-xuh722-project (npm)
- Aug 14, 2025
Malicious code in violet-infinity-qzv171-project (npm)
- Aug 14, 2025
Malicious code in violet-icicle-pca252-project (npm)
Page 5254 of 6,666