Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in rose-kiwi-xed630-project (npm)
- Aug 14, 2025
Malicious code in rose-kaleidoscope-fbg917-project (npm)
- Aug 14, 2025
Malicious code in rose-elephant-ylu913-project (npm)
- Aug 14, 2025
Malicious code in rose-ehpcl-0rkjr-twilight-project (npm)
- Aug 14, 2025
Malicious code in rose-dove-yjn704-project (npm)
- Aug 14, 2025
Malicious code in rose-crystal-uab187-project (npm)
- Aug 14, 2025
Malicious code in rose-cascade-ort672-project (npm)
- Aug 14, 2025
Malicious code in rose-bttvf-85j11-frost-project (npm)
- Aug 14, 2025
Malicious code in rose-boulder-wrv253-project (npm)
- Aug 14, 2025
Malicious code in rose-aroma-jsi289-project (npm)
- Aug 14, 2025
Malicious code in rose-7s48w-kfxh9-blossom-project (npm)
- Aug 14, 2025
Malicious code in rorclass (npm)
- Aug 14, 2025
Malicious code in root_lib (npm)
- Aug 14, 2025
Malicious code in root-app (npm)
- Aug 14, 2025
Malicious code in rooshil (npm)
- Aug 14, 2025
Malicious code in roommates (npm)
- Aug 14, 2025
Malicious code in roomflog (npm)
- Aug 14, 2025
Malicious code in roomami (npm)
- Aug 14, 2025
Malicious code in roofim (npm)
- Aug 14, 2025
Malicious code in rontest (npm)
- Aug 14, 2025
Malicious code in ronjeremy (npm)
- Aug 14, 2025
Malicious code in romizhang (npm)
- Aug 14, 2025
Malicious code in romeo-zulu-orange-xmbvw (npm)
- Aug 14, 2025
Malicious code in romeo-zulu-hdal (npm)
- Aug 14, 2025
Malicious code in romeo-zucchini-charlie-qjaux (npm)
- Aug 14, 2025
Malicious code in romeo-zfo-project (npm)
- Aug 14, 2025
Malicious code in romeo-z09-project (npm)
- Aug 14, 2025
Malicious code in romeo-yankee-zulu-dyibr (npm)
- Aug 14, 2025
Malicious code in romeo-yankee-watermelon-ndyym (npm)
- Aug 14, 2025
Malicious code in romeo-yankee-kiev (npm)
- Aug 14, 2025
Malicious code in romeo-yam-nshb (npm)
- Aug 14, 2025
Malicious code in romeo-y65-project (npm)
- Aug 14, 2025
Malicious code in romeo-wormhole-j96v (npm)
- Aug 14, 2025
Malicious code in romeo-whiskey-wxbw (npm)
- Aug 14, 2025
Malicious code in romeo-whiskey-uqns (npm)
- Aug 14, 2025
Malicious code in romeo-watermelon-ogok (npm)
- Aug 14, 2025
Malicious code in romeo-watermelon-lapk (npm)
- Aug 14, 2025
Malicious code in romeo-w8c-project (npm)
- Aug 14, 2025
Malicious code in romeo-vanilla-qsaj (npm)
- Aug 14, 2025
Malicious code in romeo-uniform-xray-cmqnp (npm)
- Aug 14, 2025
Malicious code in romeo-uniform-honeydew-dpxak (npm)
- Aug 14, 2025
Malicious code in romeo-ugli-veqk (npm)
- Aug 14, 2025
Malicious code in romeo-ugli-dkxp (npm)
- Aug 14, 2025
Malicious code in romeo-uaj-project (npm)
- Aug 14, 2025
Malicious code in romeo-tango-vtti (npm)
- Aug 14, 2025
Malicious code in romeo-tango-nwuo (npm)
- Aug 14, 2025
Malicious code in romeo-t3c-project (npm)
- Aug 14, 2025
Malicious code in romeo-sierra-mpzo (npm)
- Aug 14, 2025
Malicious code in romeo-sierra-bkxh (npm)
- Aug 14, 2025
Malicious code in romeo-rew-project (npm)
Page 5373 of 6,665