Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quince-xigua-romeo-elmco (npm)
- Aug 14, 2025
Malicious code in quince-whiskey-ggow (npm)
- Aug 14, 2025
Malicious code in quince-watermelon-yankee-bcsvi (npm)
- Aug 14, 2025
Malicious code in quince-vanilla-nectarine-haodk (npm)
- Aug 14, 2025
Malicious code in quince-uniform-dyra (npm)
- Aug 14, 2025
Malicious code in quince-ugli-mqyg (npm)
- Aug 14, 2025
Malicious code in quince-tn9-project (npm)
- Aug 14, 2025
Malicious code in quince-tango-yaqg (npm)
- Aug 14, 2025
Malicious code in quince-tangerine-hotel-gmxhr (npm)
- Aug 14, 2025
Malicious code in quince-t4d-project (npm)
- Aug 14, 2025
Malicious code in quince-smt-project (npm)
- Aug 14, 2025
Malicious code in quince-sierra-aedw (npm)
- Aug 14, 2025
Malicious code in quince-romeo-jjfl (npm)
- Aug 14, 2025
Malicious code in quince-raspberry-rijd (npm)
- Aug 14, 2025
Malicious code in quince-quebec-dggk (npm)
- Aug 14, 2025
Malicious code in quince-oscar-fnab (npm)
- Aug 14, 2025
Malicious code in quince-november-baza (npm)
- Aug 14, 2025
Malicious code in quince-nectarine-vngj (npm)
- Aug 14, 2025
Malicious code in quince-mike-kxog (npm)
- Aug 14, 2025
Malicious code in quince-lemon-apple-ejjoo (npm)
- Aug 14, 2025
Malicious code in quince-ktu-project (npm)
- Aug 14, 2025
Malicious code in quince-kio-project (npm)
- Aug 14, 2025
Malicious code in quince-jyw-project (npm)
- Aug 14, 2025
Malicious code in quince-india-hotel-fntdz (npm)
- Aug 14, 2025
Malicious code in quince-golf-papaya-xokog (npm)
- Aug 14, 2025
Malicious code in quince-foxtrot-auta (npm)
- Aug 14, 2025
Malicious code in quince-fig-quebec-wxxmb (npm)
- Aug 14, 2025
Malicious code in quince-fig-hhqf (npm)
- Aug 14, 2025
Malicious code in quince-ferry-bst0 (npm)
- Aug 14, 2025
Malicious code in quince-ei5-project (npm)
- Aug 14, 2025
Malicious code in quince-cherry-xbwk (npm)
- Aug 14, 2025
Malicious code in quince-cherry-copw (npm)
- Aug 14, 2025
Malicious code in quince-bravo-ydhd (npm)
- Aug 14, 2025
Malicious code in quince-bnu-project (npm)
- Aug 14, 2025
Malicious code in quince-bfh-project (npm)
- Aug 14, 2025
Malicious code in quince-banana-teym (npm)
- Aug 14, 2025
Malicious code in quince-azy-project (npm)
- Aug 14, 2025
Malicious code in quince-apple-dtzy (npm)
- Aug 14, 2025
Malicious code in quince-8zb-project (npm)
- Aug 14, 2025
Malicious code in quince-8me-project (npm)
- Aug 14, 2025
Malicious code in quince-7mv-project (npm)
- Aug 14, 2025
Malicious code in quince-34j-project (npm)
- Aug 14, 2025
Malicious code in quince-0yc-project (npm)
- Aug 14, 2025
Malicious code in quince-0c2-project (npm)
- Aug 14, 2025
Malicious code in quilt_rails (npm)
- Aug 14, 2025
Malicious code in quilt-spruce-aym670-project (npm)
- Aug 14, 2025
Malicious code in quilt-piano-alk860-project (npm)
- Aug 14, 2025
Malicious code in quilt-opal-wmj960-project (npm)
- Aug 14, 2025
Malicious code in quilt-opal-ols664-project (npm)
- Aug 14, 2025
Malicious code in quilt-octopus-kbt814-project (npm)
Page 5394 of 6,664