Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in quail-vortex-ttu519-project (npm)
- Aug 14, 2025
Malicious code in quail-sunset-jpp774-project (npm)
- Aug 14, 2025
Malicious code in quail-rose-pcs068-project (npm)
- Aug 14, 2025
Malicious code in quail-reef-rgk688-project (npm)
- Aug 14, 2025
Malicious code in quail-quill-xwj129-project (npm)
- Aug 14, 2025
Malicious code in quail-peacock-zxy474-project (npm)
- Aug 14, 2025
Malicious code in quail-nectar-bar876-project (npm)
- Aug 14, 2025
Malicious code in quail-kale-vcr052-project (npm)
- Aug 14, 2025
Malicious code in quail-grove-frr106-project (npm)
- Aug 14, 2025
Malicious code in quail-gorilla-lme677-project (npm)
- Aug 14, 2025
Malicious code in quail-everest-qcg262-project (npm)
- Aug 14, 2025
Malicious code in quail-boulder-rom018-project (npm)
- Aug 14, 2025
Malicious code in quagmire-zeppelin-uoc354-project (npm)
- Aug 14, 2025
Malicious code in quagmire-zenith-rzp865-project (npm)
- Aug 14, 2025
Malicious code in quagmire-nimbus-yvc023-project (npm)
- Aug 14, 2025
Malicious code in quagmire-nimbus-rhb531-project (npm)
- Aug 14, 2025
Malicious code in quagmire-moose-rrd559-project (npm)
- Aug 14, 2025
Malicious code in quagmire-meadow-bnu001-project (npm)
- Aug 14, 2025
Malicious code in quagmire-jewel-vzg080-project (npm)
- Aug 14, 2025
Malicious code in quagmire-jacket-etf134-project (npm)
- Aug 14, 2025
Malicious code in quagmire-butterfly-pgz474-project (npm)
- Aug 14, 2025
Malicious code in qua1lu (npm)
- Aug 14, 2025
Malicious code in qtunes (npm)
- Aug 14, 2025
Malicious code in qttest (npm)
- Aug 14, 2025
Malicious code in qtpscglefkzvbima (npm)
- Aug 14, 2025
Malicious code in qtproject (npm)
- Aug 14, 2025
Malicious code in qtjivrubekdaclnp (npm)
- Aug 14, 2025
Malicious code in qtgrilo (npm)
- Aug 14, 2025
Malicious code in qtglgraph (npm)
- Aug 14, 2025
Malicious code in qtdgfkubrcwmehnp (npm)
- Aug 14, 2025
Malicious code in qsowyjnukazhvxpt (npm)
- Aug 14, 2025
Malicious code in qsieve (npm)
- Aug 14, 2025
Malicious code in qsharp (npm)
- Aug 14, 2025
Malicious code in qsahitgpxjwzlnko (npm)
- Aug 14, 2025
Malicious code in qs-test-pro (npm)
- Aug 14, 2025
Malicious code in qrsapi (npm)
- Aug 14, 2025
Malicious code in qrplus (npm)
- Aug 14, 2025
Malicious code in qrobcvkfxkejauzs (npm)
- Aug 14, 2025
Malicious code in qrdisplay (npm)
- Aug 14, 2025
Malicious code in qqhack-heike-jingdian-heji (npm)
- Aug 14, 2025
Malicious code in qqhack-hedingben-yieryisan (npm)
- Aug 14, 2025
Malicious code in qq-baodian-vol2 (npm)
- Aug 14, 2025
Malicious code in qq-baodian-vol1 (npm)
- Aug 14, 2025
Malicious code in qpmtools (npm)
- Aug 14, 2025
Malicious code in qpkpekkz (npm)
- Aug 14, 2025
Malicious code in qphoneapp (npm)
- Aug 14, 2025
Malicious code in qori-tahu100-breki (npm)
- Aug 14, 2025
Malicious code in qori-saguer72-sukiwir (npm)
- Aug 14, 2025
Malicious code in qori-pecel20-breki (npm)
- Aug 14, 2025
Malicious code in qori-nasi7-breki (npm)
Page 5400 of 6,664