Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in promise-element-ui-relay-json (npm)
- Aug 14, 2025
Malicious code in promise-cron-key-sudo-analyze (npm)
- Aug 14, 2025
Malicious code in promin (npm)
- Aug 14, 2025
Malicious code in prometheus-stats-library (npm)
- Aug 14, 2025
Malicious code in promap (npm)
- Aug 14, 2025
Malicious code in proloquo (npm)
- Aug 14, 2025
Malicious code in proliphiq (npm)
- Aug 14, 2025
Malicious code in projetvls (npm)
- Aug 14, 2025
Malicious code in projetrpg (npm)
- Aug 14, 2025
Malicious code in projetoip (npm)
- Aug 14, 2025
Malicious code in projetnao (npm)
- Aug 14, 2025
Malicious code in projetbdr (npm)
- Aug 14, 2025
Malicious code in projektor (npm)
- Aug 14, 2025
Malicious code in projectn (npm)
- Aug 14, 2025
Malicious code in project-zzeq7-vanilla (npm)
- Aug 14, 2025
Malicious code in project-zxjhb-watermelon (npm)
- Aug 14, 2025
Malicious code in project-zxbm3-yam (npm)
- Aug 14, 2025
Malicious code in project-zvw9j-banana (npm)
- Aug 14, 2025
Malicious code in project-zuplm-victor (npm)
- Aug 14, 2025
Malicious code in project-zsdvd-hotel (npm)
- Aug 14, 2025
Malicious code in project-zpzcn-honeydew (npm)
- Aug 14, 2025
Malicious code in project-zpvl7-lemon (npm)
- Aug 14, 2025
Malicious code in project-zphqv-victor (npm)
- Aug 14, 2025
Malicious code in project-zninu-raspberry (npm)
- Aug 14, 2025
Malicious code in project-zm3lv-xigua (npm)
- Aug 14, 2025
Malicious code in project-zldlj-bravo (npm)
- Aug 14, 2025
Malicious code in project-zldcq-quebec (npm)
- Aug 14, 2025
Malicious code in project-zjwne-elderberry (npm)
- Aug 14, 2025
Malicious code in project-zjtx8-zucchini (npm)
- Aug 14, 2025
Malicious code in project-zhy37-alpha (npm)
- Aug 14, 2025
Malicious code in project-zh9ks-fig (npm)
- Aug 14, 2025
Malicious code in project-zh62t-elderberry (npm)
- Aug 14, 2025
Malicious code in project-zgsow-watermelon (npm)
- Aug 14, 2025
Malicious code in project-zg4e3-quince (npm)
- Aug 14, 2025
Malicious code in project-zfedv-november (npm)
- Aug 14, 2025
Malicious code in project-zf29q-echo (npm)
- Aug 14, 2025
Malicious code in project-zeszu-romeo (npm)
- Aug 14, 2025
Malicious code in project-zd9v5-xray (npm)
- Aug 14, 2025
Malicious code in project-zcvhq-papa (npm)
- Aug 14, 2025
Malicious code in project-zc3nl-oscar (npm)
- Aug 14, 2025
Malicious code in project-zbnzg-juliet (npm)
- Aug 14, 2025
Malicious code in project-zb5ac-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-zb4wb-bravo (npm)
- Aug 14, 2025
Malicious code in project-zasb2-xigua (npm)
- Aug 14, 2025
Malicious code in project-z82q7-lima (npm)
- Aug 14, 2025
Malicious code in project-z7hme-echo (npm)
- Aug 14, 2025
Malicious code in project-z5nc6-nectarine (npm)
- Aug 14, 2025
Malicious code in project-z1evu-elderberry (npm)
- Aug 14, 2025
Malicious code in project-z0u1z-strawberry (npm)
- Aug 14, 2025
Malicious code in project-z0u14-alpha (npm)
Page 5407 of 6,664