Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vfgjxobtaydwlzkp (npm)
- Aug 14, 2025
Malicious code in vfg3a (npm)
- Aug 14, 2025
Malicious code in vffrr4 (npm)
- Aug 14, 2025
Malicious code in vff4 (npm)
- Aug 14, 2025
Malicious code in vfer4 (npm)
- Aug 14, 2025
Malicious code in vfdgr43 (npm)
- Aug 14, 2025
Malicious code in vezgtayswcknhlru (npm)
- Aug 14, 2025
Malicious code in vetiver (npm)
- Aug 14, 2025
Malicious code in vet2s (npm)
- Aug 14, 2025
Malicious code in very-nay (npm)
- Aug 14, 2025
Malicious code in vertical-db-driver (npm)
- Aug 14, 2025
Malicious code in vertamedia-clickhouse-datasource (npm)
- Aug 14, 2025
Malicious code in versioningservice (npm)
- Aug 14, 2025
Malicious code in version-perseus-cladistics-ethology (npm)
- Aug 14, 2025
Malicious code in version-pegasus-indus-antares (npm)
- Aug 14, 2025
Malicious code in version-enceladus-rocket-astrometry (npm)
- Aug 14, 2025
Malicious code in version-elara-gravitationalwave-non-blocking (npm)
- Aug 14, 2025
Malicious code in versalink-tsl2561-device (npm)
- Aug 14, 2025
Malicious code in versalink-si1145-device (npm)
- Aug 14, 2025
Malicious code in versalink-rmy85000-device (npm)
- Aug 14, 2025
Malicious code in versalink-rain-device (npm)
- Aug 14, 2025
Malicious code in versalink-mock-device (npm)
- Aug 14, 2025
Malicious code in versalink-htu21d-device (npm)
- Aug 14, 2025
Malicious code in versalink-device (npm)
- Aug 14, 2025
Malicious code in versalink-cozir5-device (npm)
- Aug 14, 2025
Malicious code in versalink-bmp183-device (npm)
- Aug 14, 2025
Malicious code in versalink (npm)
- Aug 14, 2025
Malicious code in verkur (npm)
- Aug 14, 2025
Malicious code in verhalen (npm)
- Aug 14, 2025
Malicious code in verdure-qj9dq-tlap4-yew-project (npm)
- Aug 14, 2025
Malicious code in verdure-9k7jd-0q8p4-glow-project (npm)
- Aug 14, 2025
Malicious code in verdure-7r1jc-qm8be-quasar-project (npm)
- Aug 14, 2025
Malicious code in verdant_ttdws_o2o0c_dusk (npm)
- Aug 14, 2025
Malicious code in verdant_lvqtd_dme26_jade (npm)
- Aug 14, 2025
Malicious code in verdant_hvxxw_73ezm_wave (npm)
- Aug 14, 2025
Malicious code in verdant_gkg7g_8feqh_solstice (npm)
- Aug 14, 2025
Malicious code in verdant_d56zg_4xb0e_zenith (npm)
- Aug 14, 2025
Malicious code in verdant_7mzz8_kco79_kryptonite (npm)
- Aug 14, 2025
Malicious code in verdant_2r0cm_0k2li_horizon (npm)
- Aug 14, 2025
Malicious code in verdant-z0sqn-1zv03-yonder-project (npm)
- Aug 14, 2025
Malicious code in verdant-tfque-co0c5-star-project (npm)
- Aug 14, 2025
Malicious code in verdant-q77e8-ywuq3-quartz-project (npm)
- Aug 14, 2025
Malicious code in verdant-pm28p-wr262-xenith-project (npm)
- Aug 14, 2025
Malicious code in verdant-daipm-n7d7b-ocean-project (npm)
- Aug 14, 2025
Malicious code in verdant-68m3y-lodj1-ember-project (npm)
- Aug 14, 2025
Malicious code in verdant-1mvek-80cd5-zephyr-project (npm)
- Aug 14, 2025
Malicious code in verdancy (npm)
- Aug 14, 2025
Malicious code in vera-tomat54-breki (npm)
- Aug 14, 2025
Malicious code in vera-rangginang21-breki (npm)
- Aug 14, 2025
Malicious code in vepen (npm)
Page 5258 of 6,666