Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in vanilla-q7y-project (npm)
- Aug 14, 2025
Malicious code in vanilla-papa-xray-bzhrl (npm)
- Aug 14, 2025
Malicious code in vanilla-papa-cgan (npm)
- Aug 14, 2025
Malicious code in vanilla-orange-romeo-pwxmh (npm)
- Aug 14, 2025
Malicious code in vanilla-orange-pkno (npm)
- Aug 14, 2025
Malicious code in vanilla-oe4-project (npm)
- Aug 14, 2025
Malicious code in vanilla-nectarine-dtxh (npm)
- Aug 14, 2025
Malicious code in vanilla-mike-zulu-rsktj (npm)
- Aug 14, 2025
Malicious code in vanilla-mike-dzvu (npm)
- Aug 14, 2025
Malicious code in vanilla-larch-5sb7 (npm)
- Aug 14, 2025
Malicious code in vanilla-kiwi-rtwj (npm)
- Aug 14, 2025
Malicious code in vanilla-is2-project (npm)
- Aug 14, 2025
Malicious code in vanilla-ibu-project (npm)
- Aug 14, 2025
Malicious code in vanilla-hotel-fig-wmopu (npm)
- Aug 14, 2025
Malicious code in vanilla-honeydew-lima-fmujl (npm)
- Aug 14, 2025
Malicious code in vanilla-grape-pfoy (npm)
- Aug 14, 2025
Malicious code in vanilla-g7j-project (npm)
- Aug 14, 2025
Malicious code in vanilla-ft9-project (npm)
- Aug 14, 2025
Malicious code in vanilla-foxtrot-lima-gufaf (npm)
- Aug 14, 2025
Malicious code in vanilla-elderberry-oflk (npm)
- Aug 14, 2025
Malicious code in vanilla-elderberry-81g0 (npm)
- Aug 14, 2025
Malicious code in vanilla-echo-udap (npm)
- Aug 14, 2025
Malicious code in vanilla-e28-project (npm)
- Aug 14, 2025
Malicious code in vanilla-date-grape-vnfcn (npm)
- Aug 14, 2025
Malicious code in vanilla-cherry-yvjg (npm)
- Aug 14, 2025
Malicious code in vanilla-charlie-kilo-petpm (npm)
- Aug 14, 2025
Malicious code in vanilla-car-8fdk (npm)
- Aug 14, 2025
Malicious code in vanilla-banana-zucchini-xmact (npm)
- Aug 14, 2025
Malicious code in vanilla-apple-supf (npm)
- Aug 14, 2025
Malicious code in vanilla-7xn-project (npm)
- Aug 14, 2025
Malicious code in vanilla-7op-project (npm)
- Aug 14, 2025
Malicious code in vanilla-5gq-project (npm)
- Aug 14, 2025
Malicious code in vanilla-3rl-project (npm)
- Aug 14, 2025
Malicious code in vanilla-2wh-project (npm)
- Aug 14, 2025
Malicious code in vanilla-0zr-project (npm)
- Aug 14, 2025
Malicious code in vanilla-071-project (npm)
- Aug 14, 2025
Malicious code in vanabell (npm)
- Aug 14, 2025
Malicious code in vamsiproj (npm)
- Aug 14, 2025
Malicious code in vampuleerl (npm)
- Aug 14, 2025
Malicious code in valvo-custom-bs (npm)
- Aug 14, 2025
Malicious code in valutec (npm)
- Aug 14, 2025
Malicious code in valueappz-cli (npm)
- Aug 14, 2025
Malicious code in valley_jxrnh_t4bel_tundra (npm)
- Aug 14, 2025
Malicious code in valley-zodiac-ume337-project (npm)
- Aug 14, 2025
Malicious code in valley-zodiac-uhj374-project (npm)
- Aug 14, 2025
Malicious code in valley-whirlpool-rcb252-project (npm)
- Aug 14, 2025
Malicious code in valley-vista-zgh439-project (npm)
- Aug 14, 2025
Malicious code in valley-sapphire-lcu979-project (npm)
- Aug 14, 2025
Malicious code in valley-rose-emz716-project (npm)
- Aug 14, 2025
Malicious code in valley-rainbow-xma013-project (npm)
Page 5261 of 6,666