Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,214 total in npm · sorted newest first- Aug 14, 2025
Malicious code in romeo-quebec-xigua-iubzj (npm)
- Aug 14, 2025
Malicious code in romeo-qil-project (npm)
- Aug 14, 2025
Malicious code in romeo-oscar-qawg (npm)
- Aug 14, 2025
Malicious code in romeo-oscar-cvou (npm)
- Aug 14, 2025
Malicious code in romeo-ntt-project (npm)
- Aug 14, 2025
Malicious code in romeo-november-papaya-xosxq (npm)
- Aug 14, 2025
Malicious code in romeo-november-amsi (npm)
- Aug 14, 2025
Malicious code in romeo-nectarine-yqhn (npm)
- Aug 14, 2025
Malicious code in romeo-maple-cm8h (npm)
- Aug 14, 2025
Malicious code in romeo-lima-pxqp (npm)
- Aug 14, 2025
Malicious code in romeo-l0p-project (npm)
- Aug 14, 2025
Malicious code in romeo-juliet-golf-qgjvb (npm)
- Aug 14, 2025
Malicious code in romeo-inferno-nh22 (npm)
- Aug 14, 2025
Malicious code in romeo-india-tangerine-txiot (npm)
- Aug 14, 2025
Malicious code in romeo-honeydew-wdki (npm)
- Aug 14, 2025
Malicious code in romeo-grape-yaec (npm)
- Aug 14, 2025
Malicious code in romeo-golf-vlpc (npm)
- Aug 14, 2025
Malicious code in romeo-golf-v7zf (npm)
- Aug 14, 2025
Malicious code in romeo-foxtrot-november-gxrka (npm)
- Aug 14, 2025
Malicious code in romeo-echo-quince-rpbbl (npm)
- Aug 14, 2025
Malicious code in romeo-e2a-project (npm)
- Aug 14, 2025
Malicious code in romeo-dkz-project (npm)
- Aug 14, 2025
Malicious code in romeo-delta-yankee-zagbj (npm)
- Aug 14, 2025
Malicious code in romeo-bravo-eyhb (npm)
- Aug 14, 2025
Malicious code in romeo-bravo-bmbo (npm)
- Aug 14, 2025
Malicious code in romeo-beg-project (npm)
- Aug 14, 2025
Malicious code in romeo-banana-bxex (npm)
- Aug 14, 2025
Malicious code in romeo-apple-zeve (npm)
- Aug 14, 2025
Malicious code in romeo-apple-yxaz (npm)
- Aug 14, 2025
Malicious code in romeo-apple-aczo (npm)
- Aug 14, 2025
Malicious code in romeo-9wy-project (npm)
- Aug 14, 2025
Malicious code in romeo-85w-project (npm)
- Aug 14, 2025
Malicious code in romeo-7m0-project (npm)
- Aug 14, 2025
Malicious code in romeo-0u4-project (npm)
- Aug 14, 2025
Malicious code in romeo-0bm-project (npm)
- Aug 14, 2025
Malicious code in rollup-vega-passport-quasar (npm)
- Aug 14, 2025
Malicious code in rollup-polaris-publish-cosmochemistry (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-raptor-compiler (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-odin-xenos-ophiuchus (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-hermes-coronalmassejection-deneb (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-graviton-library-sublimation (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-fusion-axios-grunt (npm)
- Aug 14, 2025
Malicious code in rollup-plugin-archaeoastronomy-mocha-backend (npm)
- Aug 14, 2025
Malicious code in rollup-indus-terser-outercore (npm)
- Aug 14, 2025
Malicious code in rollup-global-google-ini (npm)
- Aug 14, 2025
Malicious code in rollup-development-vega-prettier-plugin-markdown (npm)
- Aug 14, 2025
Malicious code in rollup-dagda-less-loader-optimize-css-assets-webpack-plugin (npm)
- Aug 14, 2025
Malicious code in rollup-cors-paleoanthropology-radiometric (npm)
- Aug 14, 2025
Malicious code in rollout-models (npm)
- Aug 14, 2025
Malicious code in rolfsausi (npm)
Page 5374 of 6,665