Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quizol (npm)
- Aug 14, 2025
Malicious code in quizme (npm)
- Aug 14, 2025
Malicious code in quizharry (npm)
- Aug 14, 2025
Malicious code in quizegame (npm)
- Aug 14, 2025
Malicious code in quizdsl (npm)
- Aug 14, 2025
Malicious code in quiver_vd9q1_v5xfi_quarry (npm)
- Aug 14, 2025
Malicious code in quiver_rco8o_fl7j5_elephant (npm)
- Aug 14, 2025
Malicious code in quiver_qr5se_607lq_trill (npm)
- Aug 14, 2025
Malicious code in quiver_qdr9c_79wrv_xenolith (npm)
- Aug 14, 2025
Malicious code in quiver_oragi_k5skk_molecule (npm)
- Aug 14, 2025
Malicious code in quiver_ohdgq_4v3yj_iris (npm)
- Aug 14, 2025
Malicious code in quiver_69fqk_iiixf_zodiac (npm)
- Aug 14, 2025
Malicious code in quiver-zxezj-iztvv-reef-project (npm)
- Aug 14, 2025
Malicious code in quiver-mg8a4-zwtku-xenon-project (npm)
- Aug 14, 2025
Malicious code in quiver-dogrx-ydr03-unity-project (npm)
- Aug 14, 2025
Malicious code in quiver-acguz-e10cj-yarn-project (npm)
- Aug 14, 2025
Malicious code in quiver-97clv-nni6m-glen-project (npm)
- Aug 14, 2025
Malicious code in quiver-91c8p-veerp-aurora-project (npm)
- Aug 14, 2025
Malicious code in quiver-7h4m8-w23rr-song-project (npm)
- Aug 14, 2025
Malicious code in quiver-5cpgy-htdke-phoenix-project (npm)
- Aug 14, 2025
Malicious code in quittance (npm)
- Aug 14, 2025
Malicious code in quito-subscription-gridsome-airbnb (npm)
- Aug 14, 2025
Malicious code in quito-spectroscopy-forever-fornax (npm)
- Aug 14, 2025
Malicious code in quito-puppeteer-hyperion-rollup-plugin (npm)
- Aug 14, 2025
Malicious code in quito-private-oscillation-lacerta (npm)
- Aug 14, 2025
Malicious code in quito-outercore-repository-perseus (npm)
- Aug 14, 2025
Malicious code in quito-hydra-local-bellatrix (npm)
- Aug 14, 2025
Malicious code in quito-graviton-eslint-ursa (npm)
- Aug 14, 2025
Malicious code in quito-express-xenon-indus (npm)
- Aug 14, 2025
Malicious code in quito-eslint-config-octans-ophiuchus (npm)
- Aug 14, 2025
Malicious code in quito-cryovolcano-relay-csrf (npm)
- Aug 14, 2025
Malicious code in quintessence_zl5ym_46j82_evoke (npm)
- Aug 14, 2025
Malicious code in quintessence_w42vm_8dnb4_raven (npm)
- Aug 14, 2025
Malicious code in quintessence_pq1dc_tsnig_night (npm)
- Aug 14, 2025
Malicious code in quintessence_j08na_nagct_kismet (npm)
- Aug 14, 2025
Malicious code in quintessence_fv9lh_gotxm_wave (npm)
- Aug 14, 2025
Malicious code in quintessence_5cdlo_hydef_raven (npm)
- Aug 14, 2025
Malicious code in quintessence_0ujrr_z26vy_topaz (npm)
- Aug 14, 2025
Malicious code in quinoa-ziggurat-3b71 (npm)
- Aug 14, 2025
Malicious code in quinoa-yearling-iem3 (npm)
- Aug 14, 2025
Malicious code in quinoa-teak-uygu (npm)
- Aug 14, 2025
Malicious code in quinoa-quokka-bwuy (npm)
- Aug 14, 2025
Malicious code in quinoa-pier-vqjb (npm)
- Aug 14, 2025
Malicious code in quinoa-nutmeg-dc52 (npm)
- Aug 14, 2025
Malicious code in quinoa-november-xrp6 (npm)
- Aug 14, 2025
Malicious code in quinoa-galaxy-c35b (npm)
- Aug 14, 2025
Malicious code in quinoa-carrot-9ft6 (npm)
- Aug 14, 2025
Malicious code in quince-zulu-india-iqpjc (npm)
- Aug 14, 2025
Malicious code in quince-zucchini-cqvx (npm)
- Aug 14, 2025
Malicious code in quince-yam-rkef (npm)
Page 5393 of 6,664