Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,287 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vcodigo (npm)
- Aug 14, 2025
Malicious code in vcgr34 (npm)
- Aug 14, 2025
Malicious code in vcgr3 (npm)
- Aug 14, 2025
Malicious code in vcfspirit (npm)
- Aug 14, 2025
Malicious code in vcdapi (npm)
- Aug 14, 2025
Malicious code in vcadmin (npm)
- Aug 14, 2025
Malicious code in vc-revocation-list-2020-context (npm)
- Aug 14, 2025
Malicious code in vbwfjakshuqpdtml (npm)
- Aug 14, 2025
Malicious code in vbvfg4 (npm)
- Aug 14, 2025
Malicious code in vbsaijkpkxyugetw (npm)
- Aug 14, 2025
Malicious code in vbs-theme (npm)
- Aug 14, 2025
Malicious code in vbs-ng2-shared (npm)
- Aug 14, 2025
Malicious code in vbs-common (npm)
- Aug 14, 2025
Malicious code in vbrt3 (npm)
- Aug 14, 2025
Malicious code in vbre3 (npm)
- Aug 14, 2025
Malicious code in vbr23 (npm)
- Aug 14, 2025
Malicious code in vbozeu (npm)
- Aug 14, 2025
Malicious code in vbfr34 (npm)
- Aug 14, 2025
Malicious code in vbasnips (npm)
- Aug 14, 2025
Malicious code in vaultd (npm)
- Aug 14, 2025
Malicious code in vatit-fury (npm)
- Aug 14, 2025
Malicious code in vatit-components (npm)
- Aug 14, 2025
Malicious code in vathorst (npm)
- Aug 14, 2025
Malicious code in vasuku (npm)
- Aug 14, 2025
Malicious code in vastl (npm)
- Aug 14, 2025
Malicious code in varshini (npm)
- Aug 14, 2025
Malicious code in varnisher (npm)
- Aug 14, 2025
Malicious code in variable-name (npm)
- Aug 14, 2025
Malicious code in vargen (npm)
- Aug 14, 2025
Malicious code in vaporizza (npm)
- Aug 14, 2025
Malicious code in vaporeon (npm)
- Aug 14, 2025
Malicious code in vapo-ui-components (npm)
- Aug 14, 2025
Malicious code in vanyad (npm)
- Aug 14, 2025
Malicious code in vantage_jpish_o1epe_driftwood (npm)
- Aug 14, 2025
Malicious code in vantage_7dexc_u5t8f_quasar (npm)
- Aug 14, 2025
Malicious code in vantage_799op_lshpf_aroma (npm)
- Aug 14, 2025
Malicious code in vantage_16yzs_mxna7_ember (npm)
- Aug 14, 2025
Malicious code in vanilla-zucchini-yvdm (npm)
- Aug 14, 2025
Malicious code in vanilla-zucchini-charlie-efxne (npm)
- Aug 14, 2025
Malicious code in vanilla-yam-oscar-uasmp (npm)
- Aug 14, 2025
Malicious code in vanilla-xray-jvhp (npm)
- Aug 14, 2025
Malicious code in vanilla-xray-0kbw (npm)
- Aug 14, 2025
Malicious code in vanilla-xbx-project (npm)
- Aug 14, 2025
Malicious code in vanilla-whiskey-raspberry-tpafk (npm)
- Aug 14, 2025
Malicious code in vanilla-watermelon-oscar-gdwdp (npm)
- Aug 14, 2025
Malicious code in vanilla-w37-project (npm)
- Aug 14, 2025
Malicious code in vanilla-urr-project (npm)
- Aug 14, 2025
Malicious code in vanilla-ugli-zrku (npm)
- Aug 14, 2025
Malicious code in vanilla-ufm-project (npm)
- Aug 14, 2025
Malicious code in vanilla-u80-project (npm)
Page 5260 of 6,666