Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-t21zo-yam (npm)
- Aug 14, 2025
Malicious code in project-t1tn0-fig (npm)
- Aug 14, 2025
Malicious code in project-szxca-lemon (npm)
- Aug 14, 2025
Malicious code in project-sz2xr-mango (npm)
- Aug 14, 2025
Malicious code in project-syrbs-raspberry (npm)
- Aug 14, 2025
Malicious code in project-sx2y8-quince (npm)
- Aug 14, 2025
Malicious code in project-svvl0-lima (npm)
- Aug 14, 2025
Malicious code in project-sugy1-strawberry (npm)
- Aug 14, 2025
Malicious code in project-srla9-watermelon (npm)
- Aug 14, 2025
Malicious code in project-sqqop-bravo (npm)
- Aug 14, 2025
Malicious code in project-sppn1-hotel (npm)
- Aug 14, 2025
Malicious code in project-sokph-cherry (npm)
- Aug 14, 2025
Malicious code in project-sn1pc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-sloxj-quince (npm)
- Aug 14, 2025
Malicious code in project-sl9tf-grape (npm)
- Aug 14, 2025
Malicious code in project-sj9tt-charlie (npm)
- Aug 14, 2025
Malicious code in project-simvt-kiwi (npm)
- Aug 14, 2025
Malicious code in project-sha2a-watermelon (npm)
- Aug 14, 2025
Malicious code in project-sghq7-hotel (npm)
- Aug 14, 2025
Malicious code in project-sfqqx-golf (npm)
- Aug 14, 2025
Malicious code in project-sfahy-oscar (npm)
- Aug 14, 2025
Malicious code in project-sewdu-zucchini (npm)
- Aug 14, 2025
Malicious code in project-se93i-cherry (npm)
- Aug 14, 2025
Malicious code in project-sde2y-cherry (npm)
- Aug 14, 2025
Malicious code in project-sd71d-zucchini (npm)
- Aug 14, 2025
Malicious code in project-sd51x-bravo (npm)
- Aug 14, 2025
Malicious code in project-sbxj0-tangerine (npm)
- Aug 14, 2025
Malicious code in project-s88ww-raspberry (npm)
- Aug 14, 2025
Malicious code in project-s4lhl-tangerine (npm)
- Aug 14, 2025
Malicious code in project-s3o3y-victor (npm)
- Aug 14, 2025
Malicious code in project-s2clk-quebec (npm)
- Aug 14, 2025
Malicious code in project-rzrsc-romeo (npm)
- Aug 14, 2025
Malicious code in project-rzmmd-orange (npm)
- Aug 14, 2025
Malicious code in project-ryys4-xray (npm)
- Aug 14, 2025
Malicious code in project-rsgfa-nectarine (npm)
- Aug 14, 2025
Malicious code in project-rrxd0-elderberry (npm)
- Aug 14, 2025
Malicious code in project-rrkb2-oscar (npm)
- Aug 14, 2025
Malicious code in project-rq5hu-vanilla (npm)
- Aug 14, 2025
Malicious code in project-rpcww-orange (npm)
- Aug 14, 2025
Malicious code in project-rogku-lima (npm)
- Aug 14, 2025
Malicious code in project-rocrr-tangerine (npm)
- Aug 14, 2025
Malicious code in project-ro5v3-fig (npm)
- Aug 14, 2025
Malicious code in project-rmmu5-tangerine (npm)
- Aug 14, 2025
Malicious code in project-rlqv2-victor (npm)
- Aug 14, 2025
Malicious code in project-rgynt-fig (npm)
- Aug 14, 2025
Malicious code in project-reoyc-zulu (npm)
- Aug 14, 2025
Malicious code in project-rdk1f-juliet (npm)
- Aug 14, 2025
Malicious code in project-rcqd1-date (npm)
- Aug 14, 2025
Malicious code in project-rcotb-november (npm)
- Aug 14, 2025
Malicious code in project-rcnzq-zucchini (npm)
Page 5411 of 6,664