Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in radio-paradise-api (npm)
- Aug 14, 2025
Malicious code in radiant-interfaces (npm)
- Aug 14, 2025
Malicious code in radiance-x42ok-xu8kn-throne-project (npm)
- Aug 14, 2025
Malicious code in radiance-wander-web059-project (npm)
- Aug 14, 2025
Malicious code in radiance-r4bgv-r9m64-frost-project (npm)
- Aug 14, 2025
Malicious code in radiance-nb610-l2vho-yeti-project (npm)
- Aug 14, 2025
Malicious code in radiance-iggjj-1ty6g-nova-project (npm)
- Aug 14, 2025
Malicious code in radiance-i7yxr-h4u63-echo-project (npm)
- Aug 14, 2025
Malicious code in radiance-0d0hn-q9m3l-silk-project (npm)
- Aug 14, 2025
Malicious code in radiance-03ovp-ri3dm-jungle-project (npm)
- Aug 14, 2025
Malicious code in radhikagb (npm)
- Aug 14, 2025
Malicious code in radexgrid (npm)
- Aug 14, 2025
Malicious code in radbot-wikipedia (npm)
- Aug 14, 2025
Malicious code in radbot-mdn (npm)
- Aug 14, 2025
Malicious code in radbot (npm)
- Aug 14, 2025
Malicious code in radar-cms (npm)
- Aug 14, 2025
Malicious code in rack-path_mapper (npm)
- Aug 14, 2025
Malicious code in racism (npm)
- Aug 14, 2025
Malicious code in rachyweb (npm)
- Aug 14, 2025
Malicious code in rachael-io-common (npm)
- Aug 14, 2025
Malicious code in rabugento (npm)
- Aug 14, 2025
Malicious code in rabishot (npm)
- Aug 14, 2025
Malicious code in ra-data-google-sheets (npm)
- Aug 14, 2025
Malicious code in qxmelarnhitdkzyp (npm)
- Aug 14, 2025
Malicious code in qxierknpsbtofhja (npm)
- Aug 14, 2025
Malicious code in qxfwfd (npm)
- Aug 14, 2025
Malicious code in qwplzadyhvunjtgo (npm)
- Aug 14, 2025
Malicious code in qwortet (npm)
- Aug 14, 2025
Malicious code in qwepivnzosmkjryd (npm)
- Aug 14, 2025
Malicious code in qvukwtgfzoercxlp (npm)
- Aug 14, 2025
Malicious code in quxlhdvgksrwmcjp (npm)
- Aug 14, 2025
Malicious code in qute-tea (npm)
- Aug 14, 2025
Malicious code in qutaccess (npm)
- Aug 14, 2025
Malicious code in quotly (npm)
- Aug 14, 2025
Malicious code in quotebase (npm)
- Aug 14, 2025
Malicious code in quote-2 (npm)
- Aug 14, 2025
Malicious code in quota_tracker_ruby (npm)
- Aug 14, 2025
Malicious code in quokka-ziggurat-9yyt (npm)
- Aug 14, 2025
Malicious code in quokka-yankee-fy0o (npm)
- Aug 14, 2025
Malicious code in quokka-xenon-ypi7 (npm)
- Aug 14, 2025
Malicious code in quokka-quebec-9d0l (npm)
- Aug 14, 2025
Malicious code in quokka-mushroom-rdn2 (npm)
- Aug 14, 2025
Malicious code in quokka-eggplant-qcqy (npm)
- Aug 14, 2025
Malicious code in quokka-dock-ovyg (npm)
- Aug 14, 2025
Malicious code in quokka-castle-tkkj (npm)
- Aug 14, 2025
Malicious code in quokka-bark-krv5 (npm)
- Aug 14, 2025
Malicious code in quokka-asteroid-8vwb (npm)
- Aug 14, 2025
Malicious code in quizzzz (npm)
- Aug 14, 2025
Malicious code in quizui (npm)
- Aug 14, 2025
Malicious code in quizsort (npm)
Page 5392 of 6,664