Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in query-repository-ora-magellan (npm)
- Aug 14, 2025
Malicious code in query-kuiperbelt-blitz-eslint-plugin (npm)
- Aug 14, 2025
Malicious code in query-iota-import-double-sed (npm)
- Aug 14, 2025
Malicious code in query-hydra-postcss-loader-config (npm)
- Aug 14, 2025
Malicious code in query-emulate-stack-unix-phi (npm)
- Aug 14, 2025
Malicious code in querona (npm)
- Aug 14, 2025
Malicious code in quercus-xenon-elz3 (npm)
- Aug 14, 2025
Malicious code in quercus-uniform-ryu5 (npm)
- Aug 14, 2025
Malicious code in quercus-raspberry-qpdd (npm)
- Aug 14, 2025
Malicious code in quercus-ginkgo-reeq (npm)
- Aug 14, 2025
Malicious code in queensu (npm)
- Aug 14, 2025
Malicious code in quebec-zzn-project (npm)
- Aug 14, 2025
Malicious code in quebec-zulu-jsje (npm)
- Aug 14, 2025
Malicious code in quebec-zulu-cherry-zjmnf (npm)
- Aug 14, 2025
Malicious code in quebec-zucchini-zczj (npm)
- Aug 14, 2025
Malicious code in quebec-yam-watermelon-hdrth (npm)
- Aug 14, 2025
Malicious code in quebec-xray-golf-kupou (npm)
- Aug 14, 2025
Malicious code in quebec-xigua-yam-gvssv (npm)
- Aug 14, 2025
Malicious code in quebec-whiskey-nssb (npm)
- Aug 14, 2025
Malicious code in quebec-whiskey-fig-yjeyc (npm)
- Aug 14, 2025
Malicious code in quebec-wbf-project (npm)
- Aug 14, 2025
Malicious code in quebec-victor-grape-zmatj (npm)
- Aug 14, 2025
Malicious code in quebec-vgq-project (npm)
- Aug 14, 2025
Malicious code in quebec-vanilla-drmi (npm)
- Aug 14, 2025
Malicious code in quebec-uniform-vanilla-tpsel (npm)
- Aug 14, 2025
Malicious code in quebec-uniform-strawberry-ttgap (npm)
- Aug 14, 2025
Malicious code in quebec-ukf-project (npm)
- Aug 14, 2025
Malicious code in quebec-turnip-4vqj (npm)
- Aug 14, 2025
Malicious code in quebec-temple-r573 (npm)
- Aug 14, 2025
Malicious code in quebec-tangerine-ytjy (npm)
- Aug 14, 2025
Malicious code in quebec-tangerine-ydkp (npm)
- Aug 14, 2025
Malicious code in quebec-strawberry-lima-zihpp (npm)
- Aug 14, 2025
Malicious code in quebec-romeo-echo-sgsnh (npm)
- Aug 14, 2025
Malicious code in quebec-raspberry-lemon-vlrqb (npm)
- Aug 14, 2025
Malicious code in quebec-ra9-project (npm)
- Aug 14, 2025
Malicious code in quebec-qj3-project (npm)
- Aug 14, 2025
Malicious code in quebec-november-lemon-vjqjp (npm)
- Aug 14, 2025
Malicious code in quebec-mike-ugli-wlnxq (npm)
- Aug 14, 2025
Malicious code in quebec-mike-krjw (npm)
- Aug 14, 2025
Malicious code in quebec-lemon-bbuu (npm)
- Aug 14, 2025
Malicious code in quebec-kiwi-wujt (npm)
- Aug 14, 2025
Malicious code in quebec-kiwi-alle (npm)
- Aug 14, 2025
Malicious code in quebec-k27-project (npm)
- Aug 14, 2025
Malicious code in quebec-juliet-zciy (npm)
- Aug 14, 2025
Malicious code in quebec-india-cherry-flwtl (npm)
- Aug 14, 2025
Malicious code in quebec-i2u-project (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-ugli-jyjpb (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-fqdg (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-banana-eehld (npm)
- Aug 14, 2025
Malicious code in quebec-honeydew-iqzb (npm)
Page 5396 of 6,664