Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-ut3ep-mango (npm)
- Aug 14, 2025
Malicious code in project-uro46-kilo (npm)
- Aug 14, 2025
Malicious code in project-uqyuc-honeydew (npm)
- Aug 14, 2025
Malicious code in project-uq72a-elderberry (npm)
- Aug 14, 2025
Malicious code in project-uq2nl-alpha (npm)
- Aug 14, 2025
Malicious code in project-upbo9-yam (npm)
- Aug 14, 2025
Malicious code in project-up6a8-papaya (npm)
- Aug 14, 2025
Malicious code in project-uos56-kilo (npm)
- Aug 14, 2025
Malicious code in project-uore0-charlie (npm)
- Aug 14, 2025
Malicious code in project-un5i5-delta (npm)
- Aug 14, 2025
Malicious code in project-umckt-nectarine (npm)
- Aug 14, 2025
Malicious code in project-ulgt0-date (npm)
- Aug 14, 2025
Malicious code in project-ujv6p-honeydew (npm)
- Aug 14, 2025
Malicious code in project-uje83-india (npm)
- Aug 14, 2025
Malicious code in project-uij7k-quebec (npm)
- Aug 14, 2025
Malicious code in project-uhfrh-romeo (npm)
- Aug 14, 2025
Malicious code in project-ugonu-nectarine (npm)
- Aug 14, 2025
Malicious code in project-ugmj8-kiwi (npm)
- Aug 14, 2025
Malicious code in project-uglsi-raspberry (npm)
- Aug 14, 2025
Malicious code in project-udmve-ugli (npm)
- Aug 14, 2025
Malicious code in project-udm49-november (npm)
- Aug 14, 2025
Malicious code in project-ud5vw-cherry (npm)
- Aug 14, 2025
Malicious code in project-ucg3c-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ubexf-vanilla (npm)
- Aug 14, 2025
Malicious code in project-ua7k8-xigua (npm)
- Aug 14, 2025
Malicious code in project-u2u24-honeydew (npm)
- Aug 14, 2025
Malicious code in project-tzrfg-papa (npm)
- Aug 14, 2025
Malicious code in project-tw8hi-mike (npm)
- Aug 14, 2025
Malicious code in project-tw7v8-zulu (npm)
- Aug 14, 2025
Malicious code in project-tv02z-alpha (npm)
- Aug 14, 2025
Malicious code in project-tue7f-hotel (npm)
- Aug 14, 2025
Malicious code in project-tts9z-sierra (npm)
- Aug 14, 2025
Malicious code in project-tsi4z-xray (npm)
- Aug 14, 2025
Malicious code in project-tr5rb-charlie (npm)
- Aug 14, 2025
Malicious code in project-tr1q7-date (npm)
- Aug 14, 2025
Malicious code in project-tqyyn-kilo (npm)
- Aug 14, 2025
Malicious code in project-toql8-zulu (npm)
- Aug 14, 2025
Malicious code in project-tn7lw-tango (npm)
- Aug 14, 2025
Malicious code in project-tmuzr-kilo (npm)
- Aug 14, 2025
Malicious code in project-tld0i-quebec (npm)
- Aug 14, 2025
Malicious code in project-tl4ph-quebec (npm)
- Aug 14, 2025
Malicious code in project-tjdsy-yankee (npm)
- Aug 14, 2025
Malicious code in project-tislp-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ti5tl-grape (npm)
- Aug 14, 2025
Malicious code in project-tglcj-date (npm)
- Aug 14, 2025
Malicious code in project-tephm-papa (npm)
- Aug 14, 2025
Malicious code in project-te4tf-zucchini (npm)
- Aug 14, 2025
Malicious code in project-tdk3n-nectarine (npm)
- Aug 14, 2025
Malicious code in project-tby1o-ugli (npm)
- Aug 14, 2025
Malicious code in project-tbr2w-delta (npm)
Page 5410 of 6,664