Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in veoo-statsd (npm)
- Aug 14, 2025
Malicious code in venus-vulcan-graphql-webdriverio (npm)
- Aug 14, 2025
Malicious code in venus-selenium-semantic-release-nuxtjs (npm)
- Aug 14, 2025
Malicious code in venus-pulsar-paleoclimatology-resonance (npm)
- Aug 14, 2025
Malicious code in venus-postcss-loader-halley-tardigrade (npm)
- Aug 14, 2025
Malicious code in venus-nucleosynthesis-geckodriver-cygnus (npm)
- Aug 14, 2025
Malicious code in venus-farout-mesosphere-cryovolcano (npm)
- Aug 14, 2025
Malicious code in venus-commitizen-grunt-iota (npm)
- Aug 14, 2025
Malicious code in venus-blaze-geochronology-configstore (npm)
- Aug 14, 2025
Malicious code in ventasjpa (npm)
- Aug 14, 2025
Malicious code in venmo-emoji-list (npm)
- Aug 14, 2025
Malicious code in venice-cli (npm)
- Aug 14, 2025
Malicious code in venemous (npm)
- Aug 14, 2025
Malicious code in vendor-kendo (npm)
- Aug 14, 2025
Malicious code in venbpwyfhiljadgs (npm)
- Aug 14, 2025
Malicious code in venation (npm)
- Aug 14, 2025
Malicious code in vemdcgioazkjtxhl (npm)
- Aug 14, 2025
Malicious code in velvet-orh3j-3hw2m-moonlight-project (npm)
- Aug 14, 2025
Malicious code in velvet-gthnu-4iwsm-gale-project (npm)
- Aug 14, 2025
Malicious code in velvet-9wxz0-n95vj-basil-project (npm)
- Aug 14, 2025
Malicious code in velvet-5z66d-qkbap-indigo-project (npm)
- Aug 14, 2025
Malicious code in velvet-2ytsc-hsobi-moonstone-project (npm)
- Aug 14, 2025
Malicious code in velocity_wc4nh_ihj0y_quasar (npm)
- Aug 14, 2025
Malicious code in velocity_qy587_sana6_ember (npm)
- Aug 14, 2025
Malicious code in velocity_g4a60_yqmhg_realm (npm)
- Aug 14, 2025
Malicious code in velocity_fjefb_7sb5u_harmony (npm)
- Aug 14, 2025
Malicious code in velocity_3scv4_khrpr_xenon (npm)
- Aug 14, 2025
Malicious code in velocity_33hbr_4j7vn_tempest (npm)
- Aug 14, 2025
Malicious code in velocity_0cwg7_h1n7q_blossom (npm)
- Aug 14, 2025
Malicious code in vellent (npm)
- Aug 14, 2025
Malicious code in vell (npm)
- Aug 14, 2025
Malicious code in vegito-sp (npm)
- Aug 14, 2025
Malicious code in vega-iota-deneb-decoherence (npm)
- Aug 14, 2025
Malicious code in vega-hermes-websockets-slides (npm)
- Aug 14, 2025
Malicious code in vega-hercules-solarnebula-cryovolcano (npm)
- Aug 14, 2025
Malicious code in vega-commitizen-morgan-hermes (npm)
- Aug 14, 2025
Malicious code in veehive (npm)
- Aug 14, 2025
Malicious code in vedionote (npm)
- Aug 14, 2025
Malicious code in veda-crypto (npm)
- Aug 14, 2025
Malicious code in vecboy (npm)
- Aug 14, 2025
Malicious code in VDU-web (npm)
- Aug 14, 2025
Malicious code in vdsayimncjkwhogr (npm)
- Aug 14, 2025
Malicious code in vdrova (npm)
- Aug 14, 2025
Malicious code in vdr44 (npm)
- Aug 14, 2025
Malicious code in vdossier (npm)
- Aug 14, 2025
Malicious code in vdf44 (npm)
- Aug 14, 2025
Malicious code in vdating (npm)
- Aug 14, 2025
Malicious code in vd3434 (npm)
- Aug 14, 2025
Malicious code in vcsfjnexkloprmyb (npm)
- Aug 14, 2025
Malicious code in vcs33 (npm)
Page 5259 of 6,666