Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in victor-nnt-project (npm)
- Aug 14, 2025
Malicious code in victor-nlx-project (npm)
- Aug 14, 2025
Malicious code in victor-nectarine-vumx (npm)
- Aug 14, 2025
Malicious code in victor-mango-xemn (npm)
- Aug 14, 2025
Malicious code in victor-lemon-golf-scjwk (npm)
- Aug 14, 2025
Malicious code in victor-kiwi-delta-wqevr (npm)
- Aug 14, 2025
Malicious code in victor-khw-project (npm)
- Aug 14, 2025
Malicious code in victor-juliet-ywcr (npm)
- Aug 14, 2025
Malicious code in victor-juliet-wzte (npm)
- Aug 14, 2025
Malicious code in victor-hotel-ncmc (npm)
- Aug 14, 2025
Malicious code in victor-gorilla-fg7x (npm)
- Aug 14, 2025
Malicious code in victor-g1k-project (npm)
- Aug 14, 2025
Malicious code in victor-foxtrot-luwb (npm)
- Aug 14, 2025
Malicious code in victor-elderberry-9sod (npm)
- Aug 14, 2025
Malicious code in victor-eim-project (npm)
- Aug 14, 2025
Malicious code in victor-dgw-project (npm)
- Aug 14, 2025
Malicious code in victor-delta-kilo-lxsvv (npm)
- Aug 14, 2025
Malicious code in victor-bravo-xbtf (npm)
- Aug 14, 2025
Malicious code in victor-bravo-vanilla-tdyaf (npm)
- Aug 14, 2025
Malicious code in victor-banana-vqsr (npm)
- Aug 14, 2025
Malicious code in victor-9vf-project (npm)
- Aug 14, 2025
Malicious code in victor-7yt-project (npm)
- Aug 14, 2025
Malicious code in victor-6yv-project (npm)
- Aug 14, 2025
Malicious code in victor-6r4-project (npm)
- Aug 14, 2025
Malicious code in victor-6mk-project (npm)
- Aug 14, 2025
Malicious code in victor-6mj-project (npm)
- Aug 14, 2025
Malicious code in victor-2c3-project (npm)
- Aug 14, 2025
Malicious code in vicidial (npm)
- Aug 14, 2025
Malicious code in viaplay-vask2-core (npm)
- Aug 14, 2025
Malicious code in viaduct-ziggurat-z3f1 (npm)
- Aug 14, 2025
Malicious code in viaduct-quebec-p85e (npm)
- Aug 14, 2025
Malicious code in viaduct-kayak-t196 (npm)
- Aug 14, 2025
Malicious code in viacom-date-picker-component (npm)
- Aug 14, 2025
Malicious code in via-date-range (npm)
- Aug 14, 2025
Malicious code in via-date-picker-test-5 (npm)
- Aug 14, 2025
Malicious code in via-date-picker-test (npm)
- Aug 14, 2025
Malicious code in via-date-picker-rollup (npm)
- Aug 14, 2025
Malicious code in via-date-picker (npm)
- Aug 14, 2025
Malicious code in via-component-bundler (npm)
- Aug 14, 2025
Malicious code in vgy4 (npm)
- Aug 14, 2025
Malicious code in vgfg4e (npm)
- Aug 14, 2025
Malicious code in vgbqlptjaecnfdmz (npm)
- Aug 14, 2025
Malicious code in vgamewgdx (npm)
- Aug 14, 2025
Malicious code in vftinzjqosxuadyr (npm)
- Aug 14, 2025
Malicious code in vft34 (npm)
- Aug 14, 2025
Malicious code in vfpcongit (npm)
- Aug 14, 2025
Malicious code in vflfeed (npm)
- Aug 14, 2025
Malicious code in vfh4 (npm)
- Aug 14, 2025
Malicious code in vfgre2 (npm)
- Aug 14, 2025
Malicious code in vfgr34 (npm)
Page 5257 of 6,666