Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quartz-ripple-ppl805-project (npm)
- Aug 14, 2025
Malicious code in quartz-pg44a-qyrlb-obsidian-project (npm)
- Aug 14, 2025
Malicious code in quartz-my1fp-c80xb-violet-project (npm)
- Aug 14, 2025
Malicious code in quartz-lw7p2-v581i-twilight-project (npm)
- Aug 14, 2025
Malicious code in quartz-lvzw5-nweoo-whisper-project (npm)
- Aug 14, 2025
Malicious code in quartz-jy8u8-p2ymw-night-project (npm)
- Aug 14, 2025
Malicious code in quartz-joy-now163-project (npm)
- Aug 14, 2025
Malicious code in quartz-izggw-8rp8r-raven-project (npm)
- Aug 14, 2025
Malicious code in quartz-i4bqm-c8775-sky-project (npm)
- Aug 14, 2025
Malicious code in quartz-h8s2k-o3qy1-mosaic-project (npm)
- Aug 14, 2025
Malicious code in quartz-fj316-yfshj-pearl-project (npm)
- Aug 14, 2025
Malicious code in quartz-fie5y-vbxm7-wander-project (npm)
- Aug 14, 2025
Malicious code in quartz-e7waz-61jwy-yellow-project (npm)
- Aug 14, 2025
Malicious code in quartz-cr7fr-dkury-hearth-project (npm)
- Aug 14, 2025
Malicious code in quartz-8paia-bhkp5-flame-project (npm)
- Aug 14, 2025
Malicious code in quartz-3oxwj-eoctu-frost-project (npm)
- Aug 14, 2025
Malicious code in quartz-34rcy-vpbf9-gale-project (npm)
- Aug 14, 2025
Malicious code in quarry_za53n_5mjnv_yarn (npm)
- Aug 14, 2025
Malicious code in quarry_vw7lc_0mfi7_yarrow (npm)
- Aug 14, 2025
Malicious code in quarry_tt9ar_cyytz_quasar (npm)
- Aug 14, 2025
Malicious code in quarry_p6bpz_sshpn_aroma (npm)
- Aug 14, 2025
Malicious code in quarry_muo0y_838bf_velocity (npm)
- Aug 14, 2025
Malicious code in quarry_ijaz5_4perg_kismet (npm)
- Aug 14, 2025
Malicious code in quarry_fsmjk_d2bbb_cascade (npm)
- Aug 14, 2025
Malicious code in quarry_cy5kj_cipog_zenith (npm)
- Aug 14, 2025
Malicious code in quarry_cfi5s_dz7a4_phoenix (npm)
- Aug 14, 2025
Malicious code in quarry-xray-ldfa (npm)
- Aug 14, 2025
Malicious code in quarry-spinach-h8l6 (npm)
- Aug 14, 2025
Malicious code in quarry-nectarine-c1k8 (npm)
- Aug 14, 2025
Malicious code in quarry-mike-9pr1 (npm)
- Aug 14, 2025
Malicious code in quarry-bravo-t88d (npm)
- Aug 14, 2025
Malicious code in quarry-airplane-ss3e (npm)
- Aug 14, 2025
Malicious code in quark-vuepress-bunyan-brane (npm)
- Aug 14, 2025
Malicious code in quark-singularitarianism-geochemistry-xerxes (npm)
- Aug 14, 2025
Malicious code in quark-rigel-cors-paleobotany (npm)
- Aug 14, 2025
Malicious code in quark-protractor-prompts-yildun (npm)
- Aug 14, 2025
Malicious code in quark-meteor-geckodriver-configstore (npm)
- Aug 14, 2025
Malicious code in quark-loop-dysonswarm-phoebe (npm)
- Aug 14, 2025
Malicious code in quark-betelgeuse-duplex-wormhole (npm)
- Aug 14, 2025
Malicious code in quark-barnard-loglevel-terraforming (npm)
- Aug 14, 2025
Malicious code in quantumfoam-wasat-global-pegasus (npm)
- Aug 14, 2025
Malicious code in quantumfoam-stream-dagda-quasar (npm)
- Aug 14, 2025
Malicious code in quantumfoam-sagitta-xo-magellan (npm)
- Aug 14, 2025
Malicious code in quantumfoam-nconf-postcss-acamar (npm)
- Aug 14, 2025
Malicious code in quantumfoam-docusaurus-configstore-zenobia (npm)
- Aug 14, 2025
Malicious code in quantum-ignite-astro-cassini (npm)
- Aug 14, 2025
Malicious code in quantum-blaze-resonance-resolvers (npm)
- Aug 14, 2025
Malicious code in qualmeuip (npm)
- Aug 14, 2025
Malicious code in quakeweps (npm)
- Aug 14, 2025
Malicious code in quail-zebra-eyr278-project (npm)
Page 5399 of 6,664