Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in testcafe-fomalhaut-geomorphology-kronos (npm)
- Aug 14, 2025
Malicious code in testcafe-decoherence-cosmochemistry-selenology (npm)
- Aug 14, 2025
Malicious code in testcafe-bellatrix-axios-uglify-js (npm)
- Aug 14, 2025
Malicious code in testad (npm)
- Aug 14, 2025
Malicious code in testabdul (npm)
- Aug 14, 2025
Malicious code in test_security_ph (npm)
- Aug 14, 2025
Malicious code in test_project_1_saro_da (npm)
- Aug 14, 2025
Malicious code in test_project_1 (npm)
- Aug 14, 2025
Malicious code in test_oversight_runner (npm)
- Aug 14, 2025
Malicious code in test_npm_gnr_saro_1 (npm)
- Aug 14, 2025
Malicious code in test_mapper (npm)
- Aug 14, 2025
Malicious code in test432432e123 (npm)
- Aug 14, 2025
Malicious code in test-yakutsk-blitz-eleventy (npm)
- Aug 14, 2025
Malicious code in test-website-hashroute (npm)
- Aug 14, 2025
Malicious code in test-web-library-build (npm)
- Aug 14, 2025
Malicious code in test-syncfusion-bridge (npm)
- Aug 14, 2025
Malicious code in test-seed (npm)
- Aug 14, 2025
Malicious code in test-sdk-js (npm)
- Aug 14, 2025
Malicious code in test-pkg1337 (npm)
- Aug 14, 2025
Malicious code in test-package-ray (npm)
- Aug 14, 2025
Malicious code in test-package-for-npm (npm)
- Aug 14, 2025
Malicious code in test-npm-uupdate-package (npm)
- Aug 14, 2025
Malicious code in test-npm-contribs (npm)
- Aug 14, 2025
Malicious code in test-module-a (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zymic-pricy (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zowie-tofts (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zoons-picky (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zones-logic (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zonal-etude (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zinke-teals (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zingy-viler (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zingy-pique (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zingy-igads-basta-thegn (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zinco-pries-mural-tawie (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zigan-oshac (npm)
- Aug 14, 2025
Malicious code in test-mlw2-ziffs-slurp (npm)
- Aug 14, 2025
Malicious code in test-mlw2-ziffs-laced-winks-glogg (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zetas-demob (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zebra-fauns (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zante-wetly (npm)
- Aug 14, 2025
Malicious code in test-mlw2-zamia-toses (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yurts-walks (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yukky-bungs-birls-rishi (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yucas-leger (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yogis-runts (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yogis-apayd (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yogin-clipt (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yodel-zesty-domes-timid (npm)
- Aug 14, 2025
Malicious code in test-mlw2-ylkes-gable (npm)
- Aug 14, 2025
Malicious code in test-mlw2-yince-slobs (npm)
Page 5289 of 6,666