Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,198 total in npm · sorted newest first- Aug 14, 2025
Malicious code in qori-mieaceh78-breki (npm)
- Aug 14, 2025
Malicious code in qori-mendut69-breki (npm)
- Aug 14, 2025
Malicious code in qori-martabak30-breki (npm)
- Aug 14, 2025
Malicious code in qori-lengko66-breki (npm)
- Aug 14, 2025
Malicious code in qori-kue75-breki (npm)
- Aug 14, 2025
Malicious code in qori-klipo95-sukiwir (npm)
- Aug 14, 2025
Malicious code in qok29n (npm)
- Aug 14, 2025
Malicious code in qoards (npm)
- Aug 14, 2025
Malicious code in qnhvtowlbxdmsger (npm)
- Aug 14, 2025
Malicious code in qmzdvsenuaxcoijf (npm)
- Aug 14, 2025
Malicious code in qmycrap (npm)
- Aug 14, 2025
Malicious code in qmplot (npm)
- Aug 14, 2025
Malicious code in qmcoder (npm)
- Aug 14, 2025
Malicious code in qmanga (npm)
- Aug 14, 2025
Malicious code in qloud-api (npm)
- Aug 14, 2025
Malicious code in qlogin (npm)
- Aug 14, 2025
Malicious code in qlocate (npm)
- Aug 14, 2025
Malicious code in qlik-cloud-embedded-analytics-workshop (npm)
- Aug 14, 2025
Malicious code in qkhprysiwoeazgxc (npm)
- Aug 14, 2025
Malicious code in qkhlmzsgfiuywkov (npm)
- Aug 14, 2025
Malicious code in qiyexin (npm)
- Aug 14, 2025
Malicious code in qinjunhui (npm)
- Aug 14, 2025
Malicious code in qingting (npm)
- Aug 14, 2025
Malicious code in qidunhu (npm)
- Aug 14, 2025
Malicious code in qictest (npm)
- Aug 14, 2025
Malicious code in qianxue (npm)
- Aug 14, 2025
Malicious code in qhxpkctaumyksfol (npm)
- Aug 14, 2025
Malicious code in qgrfsawkothjivyx (npm)
- Aug 14, 2025
Malicious code in qgdlmyptbojsaucr (npm)
- Aug 14, 2025
Malicious code in qfractals (npm)
- Aug 14, 2025
Malicious code in qfkaeixcdbmjusyp (npm)
- Aug 14, 2025
Malicious code in qferdbosugcvwaik (npm)
- Aug 14, 2025
Malicious code in qfaungktekyiblhx (npm)
- Aug 14, 2025
Malicious code in qekmsupkzwcfovbj (npm)
- Aug 14, 2025
Malicious code in qdrant-node-js-basic-example (npm)
- Aug 14, 2025
Malicious code in qdnackkmxysezgpl (npm)
- Aug 14, 2025
Malicious code in qdlfxnguzpkjwbce (npm)
- Aug 14, 2025
Malicious code in qdigest (npm)
- Aug 14, 2025
Malicious code in qdgkitmswhjlxyoc (npm)
- Aug 14, 2025
Malicious code in qcipbatwzhosxrdf (npm)
- Aug 14, 2025
Malicious code in qcdn (npm)
- Aug 14, 2025
Malicious code in qbkyehxkluovdfmp (npm)
- Aug 14, 2025
Malicious code in qbirc-parser (npm)
- Aug 14, 2025
Malicious code in qbirc (npm)
- Aug 14, 2025
Malicious code in qasocial (npm)
- Aug 14, 2025
Malicious code in qartod (npm)
- Aug 14, 2025
Malicious code in qapp (npm)
- Aug 14, 2025
Malicious code in qanreoytksjkwxch (npm)
- Aug 14, 2025
Malicious code in qaceozkygxufhwin (npm)
- Aug 14, 2025
Malicious code in qaccel (npm)
Page 5401 of 6,664