Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quasar-pne84-i95wj-yew-project (npm)
- Aug 14, 2025
Malicious code in quasar-pinnacle-hab515-project (npm)
- Aug 14, 2025
Malicious code in quasar-orchid-aur247-project (npm)
- Aug 14, 2025
Malicious code in quasar-orangutan-tnb666-project (npm)
- Aug 14, 2025
Malicious code in quasar-opal-glt532-project (npm)
- Aug 14, 2025
Malicious code in quasar-opal-bbr973-project (npm)
- Aug 14, 2025
Malicious code in quasar-nugget-fty727-project (npm)
- Aug 14, 2025
Malicious code in quasar-nugget-ccs227-project (npm)
- Aug 14, 2025
Malicious code in quasar-nova-fetch-glaciology (npm)
- Aug 14, 2025
Malicious code in quasar-nimbus-vtq227-project (npm)
- Aug 14, 2025
Malicious code in quasar-lilypad-hog125-project (npm)
- Aug 14, 2025
Malicious code in quasar-lilac-yik624-project (npm)
- Aug 14, 2025
Malicious code in quasar-lilac-cxp245-project (npm)
- Aug 14, 2025
Malicious code in quasar-leopard-yey583-project (npm)
- Aug 14, 2025
Malicious code in quasar-kinetic-bootstrap-auriga (npm)
- Aug 14, 2025
Malicious code in quasar-jasmine-kph827-project (npm)
- Aug 14, 2025
Malicious code in quasar-jade-ajk319-project (npm)
- Aug 14, 2025
Malicious code in quasar-iceberg-rmo731-project (npm)
- Aug 14, 2025
Malicious code in quasar-hih1u-vewqk-verdure-project (npm)
- Aug 14, 2025
Malicious code in quasar-heka-xanadu-janus (npm)
- Aug 14, 2025
Malicious code in quasar-gs6l3-zbot0-celestial-project (npm)
- Aug 14, 2025
Malicious code in quasar-gorilla-dzj243-project (npm)
- Aug 14, 2025
Malicious code in quasar-gorge-nln067-project (npm)
- Aug 14, 2025
Malicious code in quasar-glacier-vxx511-project (npm)
- Aug 14, 2025
Malicious code in quasar-fusion-eslint-meteor (npm)
- Aug 14, 2025
Malicious code in quasar-fig-0e1t (npm)
- Aug 14, 2025
Malicious code in quasar-everest-rzu055-project (npm)
- Aug 14, 2025
Malicious code in quasar-coral-igu489-project (npm)
- Aug 14, 2025
Malicious code in quasar-conifer-3qoz (npm)
- Aug 14, 2025
Malicious code in quasar-cherry-neqb (npm)
- Aug 14, 2025
Malicious code in quasar-caravan-gav527-project (npm)
- Aug 14, 2025
Malicious code in quasar-butterfly-naa713-project (npm)
- Aug 14, 2025
Malicious code in quasar-augmentedreality-australis-planckscale (npm)
- Aug 14, 2025
Malicious code in quasar-arcturus-ionosphere-astroinformatics (npm)
- Aug 14, 2025
Malicious code in quasar-32pls-l1p4f-celestial-project (npm)
- Aug 14, 2025
Malicious code in quartzite-thrive-wtg935-project (npm)
- Aug 14, 2025
Malicious code in quartz_ugzq2_z8bop_whirlwind (npm)
- Aug 14, 2025
Malicious code in quartz_rdm1x_qa81t_dream (npm)
- Aug 14, 2025
Malicious code in quartz_ohv2g_jxc6u_snow (npm)
- Aug 14, 2025
Malicious code in quartz_lo8j0_0coys_quasar (npm)
- Aug 14, 2025
Malicious code in quartz_7kdp5_i3dp6_trill (npm)
- Aug 14, 2025
Malicious code in quartz_4g0cp_a4b9w_xylophone (npm)
- Aug 14, 2025
Malicious code in quartz_3cxue_1mxnh_pinnacle (npm)
- Aug 14, 2025
Malicious code in quartz_1ywjv_pb4a0_flare (npm)
- Aug 14, 2025
Malicious code in quartz-yucca-wjn945-project (npm)
- Aug 14, 2025
Malicious code in quartz-yard-vmy863-project (npm)
- Aug 14, 2025
Malicious code in quartz-wzheh-o9se6-juniper-project (npm)
- Aug 14, 2025
Malicious code in quartz-vu3j2-y3fc9-quill-project (npm)
- Aug 14, 2025
Malicious code in quartz-uc37l-yd3jo-nymph-project (npm)
- Aug 14, 2025
Malicious code in quartz-sunset-stc680-project (npm)
Page 5398 of 6,664