Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-llnuw-zulu (npm)
- Aug 14, 2025
Malicious code in project-lkb13-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ljsxi-romeo (npm)
- Aug 14, 2025
Malicious code in project-li3hl-lima (npm)
- Aug 14, 2025
Malicious code in project-lhady-xigua (npm)
- Aug 14, 2025
Malicious code in project-lgupa-golf (npm)
- Aug 14, 2025
Malicious code in project-lgmbj-mango (npm)
- Aug 14, 2025
Malicious code in project-lgmab-romeo (npm)
- Aug 14, 2025
Malicious code in project-lgltd-banana (npm)
- Aug 14, 2025
Malicious code in project-lgf57-uniform (npm)
- Aug 14, 2025
Malicious code in project-lfdaf-watermelon (npm)
- Aug 14, 2025
Malicious code in project-lersb-hotel (npm)
- Aug 14, 2025
Malicious code in project-ld290-tango (npm)
- Aug 14, 2025
Malicious code in project-lc8dt-lima (npm)
- Aug 14, 2025
Malicious code in project-lbihm-vanilla (npm)
- Aug 14, 2025
Malicious code in project-lbhpb-ugli (npm)
- Aug 14, 2025
Malicious code in project-lbd4a-mike (npm)
- Aug 14, 2025
Malicious code in project-la4jj-whiskey (npm)
- Aug 14, 2025
Malicious code in project-l9fo7-yam (npm)
- Aug 14, 2025
Malicious code in project-l82ki-xray (npm)
- Aug 14, 2025
Malicious code in project-l6uof-tangerine (npm)
- Aug 14, 2025
Malicious code in project-l4wh2-vanilla (npm)
- Aug 14, 2025
Malicious code in project-l3f5v-grape (npm)
- Aug 14, 2025
Malicious code in project-l1y1b-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-l0obv-oscar (npm)
- Aug 14, 2025
Malicious code in project-kzhlj-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-kyqcc-whiskey (npm)
- Aug 14, 2025
Malicious code in project-kymw2-raspberry (npm)
- Aug 14, 2025
Malicious code in project-ky9dc-zulu (npm)
- Aug 14, 2025
Malicious code in project-kxq42-kilo (npm)
- Aug 14, 2025
Malicious code in project-kx06v-bravo (npm)
- Aug 14, 2025
Malicious code in project-kvglo-cherry (npm)
- Aug 14, 2025
Malicious code in project-ks6lo-india (npm)
- Aug 14, 2025
Malicious code in project-kpci2-yam (npm)
- Aug 14, 2025
Malicious code in project-kolxj-xigua (npm)
- Aug 14, 2025
Malicious code in project-kmjlo-strawberry (npm)
- Aug 14, 2025
Malicious code in project-kkv5u-tangerine (npm)
- Aug 14, 2025
Malicious code in project-kkp1g-quebec (npm)
- Aug 14, 2025
Malicious code in project-kjf9n-cherry (npm)
- Aug 14, 2025
Malicious code in project-kj8cc-yam (npm)
- Aug 14, 2025
Malicious code in project-kitbe-yankee (npm)
- Aug 14, 2025
Malicious code in project-key9g-papa (npm)
- Aug 14, 2025
Malicious code in project-kbmrr-xigua (npm)
- Aug 14, 2025
Malicious code in project-k6zjd-mango (npm)
- Aug 14, 2025
Malicious code in project-k6eg8-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-k6cu9-kiwi (npm)
- Aug 14, 2025
Malicious code in project-k4z97-whiskey (npm)
- Aug 14, 2025
Malicious code in project-k4xxy-hotel (npm)
- Aug 14, 2025
Malicious code in project-k3sd4-banana (npm)
- Aug 14, 2025
Malicious code in project-k3nf3-yankee (npm)
Page 5415 of 6,664