Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in violet-iceberg-tpji (npm)
- Aug 14, 2025
Malicious code in violet-helicopter-adfc (npm)
- Aug 14, 2025
Malicious code in violet-gorilla-wdn829-project (npm)
- Aug 14, 2025
Malicious code in violet-glade-cta938-project (npm)
- Aug 14, 2025
Malicious code in violet-falcon-wai090-project (npm)
- Aug 14, 2025
Malicious code in violet-evergreen-qmo134-project (npm)
- Aug 14, 2025
Malicious code in violet-eagle-kjmy (npm)
- Aug 14, 2025
Malicious code in violet-coral-dkz995-project (npm)
- Aug 14, 2025
Malicious code in violet-7fhaw-ulfdv-quill-project (npm)
- Aug 14, 2025
Malicious code in violet-5d0ml-vubdo-blossom-project (npm)
- Aug 14, 2025
Malicious code in violet-1tl08-t7k27-serenity-project (npm)
- Aug 14, 2025
Malicious code in violba (npm)
- Aug 14, 2025
Malicious code in vinyl-content-tostring (npm)
- Aug 14, 2025
Malicious code in vinita (npm)
- Aug 14, 2025
Malicious code in vinelist (npm)
- Aug 14, 2025
Malicious code in vinegar-walnut-ly0w (npm)
- Aug 14, 2025
Malicious code in vinegar-quebec-nl32 (npm)
- Aug 14, 2025
Malicious code in vinegar-papa-xfu6 (npm)
- Aug 14, 2025
Malicious code in vinegar-oscar-tk2r (npm)
- Aug 14, 2025
Malicious code in vinegar-oscar-mrc4 (npm)
- Aug 14, 2025
Malicious code in vinegar-horseradish-rx23 (npm)
- Aug 14, 2025
Malicious code in vine-wisp-lex160-project (npm)
- Aug 14, 2025
Malicious code in vine-umbra-kav147-project (npm)
- Aug 14, 2025
Malicious code in vine-tornado-mvx425-project (npm)
- Aug 14, 2025
Malicious code in vine-savanna-mej488-project (npm)
- Aug 14, 2025
Malicious code in vine-savanna-aco214-project (npm)
- Aug 14, 2025
Malicious code in vine-river-him878-project (npm)
- Aug 14, 2025
Malicious code in vine-reef-yos603-project (npm)
- Aug 14, 2025
Malicious code in vine-rainbow-cml992-project (npm)
- Aug 14, 2025
Malicious code in vine-nectar-uxy225-project (npm)
- Aug 14, 2025
Malicious code in vine-lightning-jbr406-project (npm)
- Aug 14, 2025
Malicious code in vine-horizon-xiz912-project (npm)
- Aug 14, 2025
Malicious code in vine-ant-fyf959-project (npm)
- Aug 14, 2025
Malicious code in vina-serimuka85-breki (npm)
- Aug 14, 2025
Malicious code in vina-semur72-breki (npm)
- Aug 14, 2025
Malicious code in vina-ronde86-sukiwir (npm)
- Aug 14, 2025
Malicious code in vina-lutis55-kuki (npm)
- Aug 14, 2025
Malicious code in vina-gandul32-breki (npm)
- Aug 14, 2025
Malicious code in vina-enting24-sukiwir (npm)
- Aug 14, 2025
Malicious code in vimxcode (npm)
- Aug 14, 2025
Malicious code in vimrunner (npm)
- Aug 14, 2025
Malicious code in vimplugs (npm)
- Aug 14, 2025
Malicious code in vimmpc (npm)
- Aug 14, 2025
Malicious code in vimitest (npm)
- Aug 14, 2025
Malicious code in vimfocus (npm)
- Aug 14, 2025
Malicious code in vimagneto (npm)
- Aug 14, 2025
Malicious code in villas (npm)
- Aug 14, 2025
Malicious code in vijayaraj (npm)
- Aug 14, 2025
Malicious code in view-user-code-proxy-emulate (npm)
- Aug 14, 2025
Malicious code in view-epsilon-kernel-boolean-long (npm)
Page 5255 of 6,666