Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-n6ruc-whiskey (npm)
- Aug 14, 2025
Malicious code in project-n43n1-uniform (npm)
- Aug 14, 2025
Malicious code in project-n3yy6-papaya (npm)
- Aug 14, 2025
Malicious code in project-n3qvc-victor (npm)
- Aug 14, 2025
Malicious code in project-n1ihq-grape (npm)
- Aug 14, 2025
Malicious code in project-n0rer-orange (npm)
- Aug 14, 2025
Malicious code in project-mzwht-echo (npm)
- Aug 14, 2025
Malicious code in project-mzp8i-watermelon (npm)
- Aug 14, 2025
Malicious code in project-mzkac-lemon (npm)
- Aug 14, 2025
Malicious code in project-mwxlu-ugli (npm)
- Aug 14, 2025
Malicious code in project-mwq3d-ugli (npm)
- Aug 14, 2025
Malicious code in project-mwi5v-mike (npm)
- Aug 14, 2025
Malicious code in project-mrwbh-oscar (npm)
- Aug 14, 2025
Malicious code in project-mrnbi-tangerine (npm)
- Aug 14, 2025
Malicious code in project-mqjbp-vanilla (npm)
- Aug 14, 2025
Malicious code in project-mqex1-zucchini (npm)
- Aug 14, 2025
Malicious code in project-mppvv-fig (npm)
- Aug 14, 2025
Malicious code in project-mpk53-uniform (npm)
- Aug 14, 2025
Malicious code in project-mlmek-elderberry (npm)
- Aug 14, 2025
Malicious code in project-mkw09-yankee (npm)
- Aug 14, 2025
Malicious code in project-mknxk-raspberry (npm)
- Aug 14, 2025
Malicious code in project-mj6hl-xray (npm)
- Aug 14, 2025
Malicious code in project-mj3va-ugli (npm)
- Aug 14, 2025
Malicious code in project-mi5g1-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-mhcmo-elderberry (npm)
- Aug 14, 2025
Malicious code in project-mghrk-banana (npm)
- Aug 14, 2025
Malicious code in project-mdcz5-lemon (npm)
- Aug 14, 2025
Malicious code in project-mcrfe-hotel (npm)
- Aug 14, 2025
Malicious code in project-mc9ts-delta (npm)
- Aug 14, 2025
Malicious code in project-ma85i-xigua (npm)
- Aug 14, 2025
Malicious code in project-m9hzb-quince (npm)
- Aug 14, 2025
Malicious code in project-m9d4y-yam (npm)
- Aug 14, 2025
Malicious code in project-m7ghl-whiskey (npm)
- Aug 14, 2025
Malicious code in project-m6xti-banana (npm)
- Aug 14, 2025
Malicious code in project-m6g91-whiskey (npm)
- Aug 14, 2025
Malicious code in project-m48m1-november (npm)
- Aug 14, 2025
Malicious code in project-m2p8s-whiskey (npm)
- Aug 14, 2025
Malicious code in project-lzeib-vanilla (npm)
- Aug 14, 2025
Malicious code in project-lyxy7-bravo (npm)
- Aug 14, 2025
Malicious code in project-lyqta-banana (npm)
- Aug 14, 2025
Malicious code in project-lyhno-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ly5lj-tangerine (npm)
- Aug 14, 2025
Malicious code in project-lwpg7-date (npm)
- Aug 14, 2025
Malicious code in project-ltlq9-india (npm)
- Aug 14, 2025
Malicious code in project-lson5-sierra (npm)
- Aug 14, 2025
Malicious code in project-lrysr-lemon (npm)
- Aug 14, 2025
Malicious code in project-lptbx-romeo (npm)
- Aug 14, 2025
Malicious code in project-lo4m8-apple (npm)
- Aug 14, 2025
Malicious code in project-lmmnt-lima (npm)
- Aug 14, 2025
Malicious code in project-lmke9-orange (npm)
Page 5414 of 6,664