Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,242 total in npm · sorted newest first- Aug 14, 2025
Malicious code in sierra-yankee-india-noudz (npm)
- Aug 14, 2025
Malicious code in sierra-yam-wkhl (npm)
- Aug 14, 2025
Malicious code in sierra-xray-wfsg (npm)
- Aug 14, 2025
Malicious code in sierra-xigua-pgqb (npm)
- Aug 14, 2025
Malicious code in sierra-xigua-givw (npm)
- Aug 14, 2025
Malicious code in sierra-wn2-project (npm)
- Aug 14, 2025
Malicious code in sierra-whiskey-uoqf (npm)
- Aug 14, 2025
Malicious code in sierra-watermelon-romeo-uudla (npm)
- Aug 14, 2025
Malicious code in sierra-watermelon-jkyw (npm)
- Aug 14, 2025
Malicious code in sierra-victor-juliet-fwily (npm)
- Aug 14, 2025
Malicious code in sierra-vanilla-india-ygnwg (npm)
- Aug 14, 2025
Malicious code in sierra-umbrella-5lx8 (npm)
- Aug 14, 2025
Malicious code in sierra-romeo-victor-erdzo (npm)
- Aug 14, 2025
Malicious code in sierra-qxx-project (npm)
- Aug 14, 2025
Malicious code in sierra-pulsar-2nao (npm)
- Aug 14, 2025
Malicious code in sierra-parsnip-pcsf (npm)
- Aug 14, 2025
Malicious code in sierra-oscar-whiskey-jbpkp (npm)
- Aug 14, 2025
Malicious code in sierra-oscar-tangerine-avqer (npm)
- Aug 14, 2025
Malicious code in sierra-oscar-ajix (npm)
- Aug 14, 2025
Malicious code in sierra-mango-qjdz (npm)
- Aug 14, 2025
Malicious code in sierra-kiwi-xrao (npm)
- Aug 14, 2025
Malicious code in sierra-kiwi-cherry-jgbeb (npm)
- Aug 14, 2025
Malicious code in sierra-kilo-wfpf (npm)
- Aug 14, 2025
Malicious code in sierra-kilo-chkz (npm)
- Aug 14, 2025
Malicious code in sierra-k3d-project (npm)
- Aug 14, 2025
Malicious code in sierra-india-kiwi-hrwaz (npm)
- Aug 14, 2025
Malicious code in sierra-ihm-project (npm)
- Aug 14, 2025
Malicious code in sierra-golf-juliet-phwxo (npm)
- Aug 14, 2025
Malicious code in sierra-fig-grape-obwlt (npm)
- Aug 14, 2025
Malicious code in sierra-deq-project (npm)
- Aug 14, 2025
Malicious code in sierra-delta-rbjm (npm)
- Aug 14, 2025
Malicious code in sierra-delta-bzeq (npm)
- Aug 14, 2025
Malicious code in sierra-date-03qv (npm)
- Aug 14, 2025
Malicious code in sierra-cherry-raspberry-rsfnx (npm)
- Aug 14, 2025
Malicious code in sierra-bva-project (npm)
- Aug 14, 2025
Malicious code in sierra-bravo-qtkm (npm)
- Aug 14, 2025
Malicious code in sierra-b1c-project (npm)
- Aug 14, 2025
Malicious code in sierra-9f0-project (npm)
- Aug 14, 2025
Malicious code in sierra-9el-project (npm)
- Aug 14, 2025
Malicious code in sierra-7bo-project (npm)
- Aug 14, 2025
Malicious code in sierra-58r-project (npm)
- Aug 14, 2025
Malicious code in sierra-505-project (npm)
- Aug 14, 2025
Malicious code in sierra-3ll-project (npm)
- Aug 14, 2025
Malicious code in sierra-23c-project (npm)
- Aug 14, 2025
Malicious code in sidannar (npm)
- Aug 14, 2025
Malicious code in sicoca (npm)
- Aug 14, 2025
Malicious code in shyp-components (npm)
- Aug 14, 2025
Malicious code in shwoten (npm)
- Aug 14, 2025
Malicious code in shusnow (npm)
- Aug 14, 2025
Malicious code in shupito (npm)
Page 5358 of 6,665