Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-ovt9r-yankee (npm)
- Aug 14, 2025
Malicious code in project-otygh-echo (npm)
- Aug 14, 2025
Malicious code in project-orht8-date (npm)
- Aug 14, 2025
Malicious code in project-orbss-mango (npm)
- Aug 14, 2025
Malicious code in project-oqmue-papaya (npm)
- Aug 14, 2025
Malicious code in project-oovdk-delta (npm)
- Aug 14, 2025
Malicious code in project-omdqc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ok17b-quince (npm)
- Aug 14, 2025
Malicious code in project-ojzxv-cherry (npm)
- Aug 14, 2025
Malicious code in project-og0x6-cherry (npm)
- Aug 14, 2025
Malicious code in project-ofj5n-hotel (npm)
- Aug 14, 2025
Malicious code in project-oe83s-golf (npm)
- Aug 14, 2025
Malicious code in project-ocupq-honeydew (npm)
- Aug 14, 2025
Malicious code in project-obrh2-alpha (npm)
- Aug 14, 2025
Malicious code in project-ob49g-mike (npm)
- Aug 14, 2025
Malicious code in project-o9m46-hotel (npm)
- Aug 14, 2025
Malicious code in project-o84vm-yam (npm)
- Aug 14, 2025
Malicious code in project-o6im6-fig (npm)
- Aug 14, 2025
Malicious code in project-o4tg7-watermelon (npm)
- Aug 14, 2025
Malicious code in project-o4hbq-apple (npm)
- Aug 14, 2025
Malicious code in project-o4fno-oscar (npm)
- Aug 14, 2025
Malicious code in project-o1s89-lemon (npm)
- Aug 14, 2025
Malicious code in project-nzevm-date (npm)
- Aug 14, 2025
Malicious code in project-nza9r-raspberry (npm)
- Aug 14, 2025
Malicious code in project-ny9gt-quince (npm)
- Aug 14, 2025
Malicious code in project-nxsf4-quince (npm)
- Aug 14, 2025
Malicious code in project-nxkg9-fig (npm)
- Aug 14, 2025
Malicious code in project-nxi8b-yankee (npm)
- Aug 14, 2025
Malicious code in project-nx6ew-bravo (npm)
- Aug 14, 2025
Malicious code in project-nv40w-cherry (npm)
- Aug 14, 2025
Malicious code in project-nug91-raspberry (npm)
- Aug 14, 2025
Malicious code in project-nrp5u-strawberry (npm)
- Aug 14, 2025
Malicious code in project-nriak-yankee (npm)
- Aug 14, 2025
Malicious code in project-nqxce-india (npm)
- Aug 14, 2025
Malicious code in project-nqkde-date (npm)
- Aug 14, 2025
Malicious code in project-nqf04-juliet (npm)
- Aug 14, 2025
Malicious code in project-npxzz-echo (npm)
- Aug 14, 2025
Malicious code in project-npd6r-golf (npm)
- Aug 14, 2025
Malicious code in project-nmy6l-apple (npm)
- Aug 14, 2025
Malicious code in project-nlzao-papaya (npm)
- Aug 14, 2025
Malicious code in project-njuic-mike (npm)
- Aug 14, 2025
Malicious code in project-nj17h-vanilla (npm)
- Aug 14, 2025
Malicious code in project-nh43a-charlie (npm)
- Aug 14, 2025
Malicious code in project-ngzuz-sierra (npm)
- Aug 14, 2025
Malicious code in project-ng6-lib-app (npm)
- Aug 14, 2025
Malicious code in project-nfcqb-zulu (npm)
- Aug 14, 2025
Malicious code in project-nal2f-bravo (npm)
- Aug 14, 2025
Malicious code in project-n9ijt-sierra (npm)
- Aug 14, 2025
Malicious code in project-n8wrd-charlie (npm)
- Aug 14, 2025
Malicious code in project-n7ckz-ugli (npm)
Page 5413 of 6,664