Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-jvo6j-papaya (npm)
- Aug 14, 2025
Malicious code in project-ju84u-romeo (npm)
- Aug 14, 2025
Malicious code in project-js0x2-bravo (npm)
- Aug 14, 2025
Malicious code in project-jrytt-charlie (npm)
- Aug 14, 2025
Malicious code in project-jlgv3-nectarine (npm)
- Aug 14, 2025
Malicious code in project-jl98r-kiwi (npm)
- Aug 14, 2025
Malicious code in project-jkyeg-raspberry (npm)
- Aug 14, 2025
Malicious code in project-jklq6-hotel (npm)
- Aug 14, 2025
Malicious code in project-jj6w9-strawberry (npm)
- Aug 14, 2025
Malicious code in project-jj5kn-quince (npm)
- Aug 14, 2025
Malicious code in project-jj1c9-lima (npm)
- Aug 14, 2025
Malicious code in project-jir0a-zucchini (npm)
- Aug 14, 2025
Malicious code in project-jhju4-ugli (npm)
- Aug 14, 2025
Malicious code in project-jh74n-fig (npm)
- Aug 14, 2025
Malicious code in project-jfjlm-charlie (npm)
- Aug 14, 2025
Malicious code in project-jeycs-lima (npm)
- Aug 14, 2025
Malicious code in project-je2mk-watermelon (npm)
- Aug 14, 2025
Malicious code in project-jcjh5-xray (npm)
- Aug 14, 2025
Malicious code in project-jbn4w-tango (npm)
- Aug 14, 2025
Malicious code in project-jb1k2-uniform (npm)
- Aug 14, 2025
Malicious code in project-jadza-date (npm)
- Aug 14, 2025
Malicious code in project-j8hno-apple (npm)
- Aug 14, 2025
Malicious code in project-j7asx-zucchini (npm)
- Aug 14, 2025
Malicious code in project-j5h4i-bravo (npm)
- Aug 14, 2025
Malicious code in project-j26aw-apple (npm)
- Aug 14, 2025
Malicious code in project-j1g6v-vanilla (npm)
- Aug 14, 2025
Malicious code in project-izew6-delta (npm)
- Aug 14, 2025
Malicious code in project-iz8sy-fig (npm)
- Aug 14, 2025
Malicious code in project-iyltu-orange (npm)
- Aug 14, 2025
Malicious code in project-ivtmk-zulu (npm)
- Aug 14, 2025
Malicious code in project-ivqmp-grape (npm)
- Aug 14, 2025
Malicious code in project-iv1zl-echo (npm)
- Aug 14, 2025
Malicious code in project-iu4m9-papa (npm)
- Aug 14, 2025
Malicious code in project-isqgr-strawberry (npm)
- Aug 14, 2025
Malicious code in project-ipr1r-grape (npm)
- Aug 14, 2025
Malicious code in project-iok5f-date (npm)
- Aug 14, 2025
Malicious code in project-imlkd-banana (npm)
- Aug 14, 2025
Malicious code in project-il5rj-kiwi (npm)
- Aug 14, 2025
Malicious code in project-ijmov-papaya (npm)
- Aug 14, 2025
Malicious code in project-iieyv-hotel (npm)
- Aug 14, 2025
Malicious code in project-iia8p-charlie (npm)
- Aug 14, 2025
Malicious code in project-ii2kp-uniform (npm)
- Aug 14, 2025
Malicious code in project-ihtbx-lima (npm)
- Aug 14, 2025
Malicious code in project-igmpt-charlie (npm)
- Aug 14, 2025
Malicious code in project-ig3z1-kiwi (npm)
- Aug 14, 2025
Malicious code in project-ifqg4-date (npm)
- Aug 14, 2025
Malicious code in project-iexpu-whiskey (npm)
- Aug 14, 2025
Malicious code in project-idkux-nectarine (npm)
- Aug 14, 2025
Malicious code in project-idjvz-kiwi (npm)
- Aug 14, 2025
Malicious code in project-icf0t-quince (npm)
Page 5416 of 6,664