Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quilt-fern-hec792-project (npm)
- Aug 14, 2025
Malicious code in quilt-everglow-vyn346-project (npm)
- Aug 14, 2025
Malicious code in quill-zebra-hpc995-project (npm)
- Aug 14, 2025
Malicious code in quill-z70bv-wqfqu-moonstone-project (npm)
- Aug 14, 2025
Malicious code in quill-yawn-uoy557-project (npm)
- Aug 14, 2025
Malicious code in quill-ta218-uc1re-night-project (npm)
- Aug 14, 2025
Malicious code in quill-star-mgi381-project (npm)
- Aug 14, 2025
Malicious code in quill-quasar-jgd162-project (npm)
- Aug 14, 2025
Malicious code in quill-quasar-dzw393-project (npm)
- Aug 14, 2025
Malicious code in quill-pinnacle-oxq146-project (npm)
- Aug 14, 2025
Malicious code in quill-orangutan-yno075-project (npm)
- Aug 14, 2025
Malicious code in quill-neq2a-pz4fq-fern-project (npm)
- Aug 14, 2025
Malicious code in quill-meadow-xks435-project (npm)
- Aug 14, 2025
Malicious code in quill-ldf9z-ko694-yonder-project (npm)
- Aug 14, 2025
Malicious code in quill-kiwi-yoc154-project (npm)
- Aug 14, 2025
Malicious code in quill-js7hm-qketz-flame-project (npm)
- Aug 14, 2025
Malicious code in quill-jacket-qzh852-project (npm)
- Aug 14, 2025
Malicious code in quill-jacket-mkd652-project (npm)
- Aug 14, 2025
Malicious code in quill-fjord-pri082-project (npm)
- Aug 14, 2025
Malicious code in quill-f8h86-j8tvw-dynamo-project (npm)
- Aug 14, 2025
Malicious code in quill-dandelion-ged596-project (npm)
- Aug 14, 2025
Malicious code in quill-bays6-gsrul-violet-project (npm)
- Aug 14, 2025
Malicious code in quill-baddk-22lbk-yarrow-project (npm)
- Aug 14, 2025
Malicious code in quill-amber-sef146-project (npm)
- Aug 14, 2025
Malicious code in quill-aabek-x41jv-zephyr-project (npm)
- Aug 14, 2025
Malicious code in quill-9aaa6-trbiq-zephyr-project (npm)
- Aug 14, 2025
Malicious code in quickyfit (npm)
- Aug 14, 2025
Malicious code in quicktune (npm)
- Aug 14, 2025
Malicious code in quicktun (npm)
- Aug 14, 2025
Malicious code in quickstart-mobile-server (npm)
- Aug 14, 2025
Malicious code in quicksilver_9t114_rphhy_honey (npm)
- Aug 14, 2025
Malicious code in quicksilver_68c7s_7oj7d_zenith (npm)
- Aug 14, 2025
Malicious code in quicksilver-mapbl-yosmr-bison-project (npm)
- Aug 14, 2025
Malicious code in quicksilver-lsmzm-hmnfc-ember-project (npm)
- Aug 14, 2025
Malicious code in quicks (npm)
- Aug 14, 2025
Malicious code in quickmud (npm)
- Aug 14, 2025
Malicious code in quick-start_onnxruntime-node (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in quick-start (npm)
- Aug 14, 2025
Malicious code in quick-old-grep-virtualize-xml (npm)
- Aug 14, 2025
Malicious code in quick-code-balance-spy-java (npm)
- Aug 14, 2025
Malicious code in quicbooks (npm)
- Aug 14, 2025
Malicious code in qui-theme-builder (npm)
- Aug 14, 2025
Malicious code in queue-firebase (npm)
- Aug 14, 2025
Malicious code in queue-consumer-cg (npm)
- Aug 14, 2025
Malicious code in querynews (npm)
- Aug 14, 2025
Malicious code in query_response-active_record (npm)
- Aug 14, 2025
Malicious code in query_response (npm)
- Aug 14, 2025
Malicious code in query_layer-active_record (npm)
- Aug 14, 2025
Malicious code in query-sudo-web-yaml-iota (npm)
- Aug 14, 2025
Malicious code in query-simple-hot-sanitize-balance (npm)
Page 5395 of 6,664