Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-ravrm-victor (npm)
- Aug 14, 2025
Malicious code in project-ra6yi-november (npm)
- Aug 14, 2025
Malicious code in project-r7cyh-papa (npm)
- Aug 14, 2025
Malicious code in project-r67nd-oscar (npm)
- Aug 14, 2025
Malicious code in project-r0x8y-charlie (npm)
- Aug 14, 2025
Malicious code in project-r0q7k-strawberry (npm)
- Aug 14, 2025
Malicious code in project-r0jwm-strawberry (npm)
- Aug 14, 2025
Malicious code in project-qxs0k-zucchini (npm)
- Aug 14, 2025
Malicious code in project-qwfgm-xigua (npm)
- Aug 14, 2025
Malicious code in project-qqezv-yankee (npm)
- Aug 14, 2025
Malicious code in project-qpucj-apple (npm)
- Aug 14, 2025
Malicious code in project-qnfrm-sierra (npm)
- Aug 14, 2025
Malicious code in project-qlcap-charlie (npm)
- Aug 14, 2025
Malicious code in project-ql7fw-mike (npm)
- Aug 14, 2025
Malicious code in project-ql6hm-cherry (npm)
- Aug 14, 2025
Malicious code in project-qkhp4-date (npm)
- Aug 14, 2025
Malicious code in project-qhyil-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-qggab-date (npm)
- Aug 14, 2025
Malicious code in project-qfipx-date (npm)
- Aug 14, 2025
Malicious code in project-qcj9v-romeo (npm)
- Aug 14, 2025
Malicious code in project-q8a0c-victor (npm)
- Aug 14, 2025
Malicious code in project-q85of-tangerine (npm)
- Aug 14, 2025
Malicious code in project-q82xd-oscar (npm)
- Aug 14, 2025
Malicious code in project-q7b2j-oscar (npm)
- Aug 14, 2025
Malicious code in project-q45zc-yam (npm)
- Aug 14, 2025
Malicious code in project-q3fyl-quebec (npm)
- Aug 14, 2025
Malicious code in project-pzrhc-delta (npm)
- Aug 14, 2025
Malicious code in project-pwput-quebec (npm)
- Aug 14, 2025
Malicious code in project-pvtq0-uniform (npm)
- Aug 14, 2025
Malicious code in project-psq3h-zucchini (npm)
- Aug 14, 2025
Malicious code in project-pqr6w-fig (npm)
- Aug 14, 2025
Malicious code in project-ponv3-tangerine (npm)
- Aug 14, 2025
Malicious code in project-pmix6-delta (npm)
- Aug 14, 2025
Malicious code in project-pkjtm-echo (npm)
- Aug 14, 2025
Malicious code in project-pi48q-raspberry (npm)
- Aug 14, 2025
Malicious code in project-pfa9s-golf (npm)
- Aug 14, 2025
Malicious code in project-ped9e-orange (npm)
- Aug 14, 2025
Malicious code in project-pe7k1-india (npm)
- Aug 14, 2025
Malicious code in project-pbukw-hotel (npm)
- Aug 14, 2025
Malicious code in project-pbi01-yankee (npm)
- Aug 14, 2025
Malicious code in project-pb5lg-strawberry (npm)
- Aug 14, 2025
Malicious code in project-pavpo-raspberry (npm)
- Aug 14, 2025
Malicious code in project-pab6f-charlie (npm)
- Aug 14, 2025
Malicious code in project-p5uex-apple (npm)
- Aug 14, 2025
Malicious code in project-p2uvf-delta (npm)
- Aug 14, 2025
Malicious code in project-oywf0-india (npm)
- Aug 14, 2025
Malicious code in project-oy2hi-papa (npm)
- Aug 14, 2025
Malicious code in project-oy122-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ow6xw-strawberry (npm)
- Aug 14, 2025
Malicious code in project-ovw1j-uniform (npm)
Page 5412 of 6,664