Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-gi38z-alpha (npm)
- Aug 14, 2025
Malicious code in project-ga43u-kiwi (npm)
- Aug 14, 2025
Malicious code in project-g9s8n-whiskey (npm)
- Aug 14, 2025
Malicious code in project-g91qz-sierra (npm)
- Aug 14, 2025
Malicious code in project-g8ns0-date (npm)
- Aug 14, 2025
Malicious code in project-g8hgq-zucchini (npm)
- Aug 14, 2025
Malicious code in project-g55re-fig (npm)
- Aug 14, 2025
Malicious code in project-g2rwi-vanilla (npm)
- Aug 14, 2025
Malicious code in project-fz3uh-watermelon (npm)
- Aug 14, 2025
Malicious code in project-fz1if-fig (npm)
- Aug 14, 2025
Malicious code in project-fyvpa-golf (npm)
- Aug 14, 2025
Malicious code in project-fyezf-yam (npm)
- Aug 14, 2025
Malicious code in project-fxnni-zulu (npm)
- Aug 14, 2025
Malicious code in project-fwlhu-echo (npm)
- Aug 14, 2025
Malicious code in project-fw6wb-alpha (npm)
- Aug 14, 2025
Malicious code in project-fvi48-fig (npm)
- Aug 14, 2025
Malicious code in project-fu5kt-lima (npm)
- Aug 14, 2025
Malicious code in project-ftx3f-kiwi (npm)
- Aug 14, 2025
Malicious code in project-ftimt-golf (npm)
- Aug 14, 2025
Malicious code in project-fsuyq-strawberry (npm)
- Aug 14, 2025
Malicious code in project-frjcn-elderberry (npm)
- Aug 14, 2025
Malicious code in project-fqd3c-oscar (npm)
- Aug 14, 2025
Malicious code in project-fpitf-uniform (npm)
- Aug 14, 2025
Malicious code in project-fn9kr-hotel (npm)
- Aug 14, 2025
Malicious code in project-fn8px-apple (npm)
- Aug 14, 2025
Malicious code in project-fjw8d-apple (npm)
- Aug 14, 2025
Malicious code in project-fjted-india (npm)
- Aug 14, 2025
Malicious code in project-fjp76-lima (npm)
- Aug 14, 2025
Malicious code in project-ficll-hotel (npm)
- Aug 14, 2025
Malicious code in project-ffz32-date (npm)
- Aug 14, 2025
Malicious code in project-ff648-uniform (npm)
- Aug 14, 2025
Malicious code in project-fez6w-orange (npm)
- Aug 14, 2025
Malicious code in project-feg6l-fig (npm)
- Aug 14, 2025
Malicious code in project-fe9l1-bravo (npm)
- Aug 14, 2025
Malicious code in project-fe4o7-strawberry (npm)
- Aug 14, 2025
Malicious code in project-fbywc-mango (npm)
- Aug 14, 2025
Malicious code in project-fazib-november (npm)
- Aug 14, 2025
Malicious code in project-fajvd-vanilla (npm)
- Aug 14, 2025
Malicious code in project-f7o5u-hotel (npm)
- Aug 14, 2025
Malicious code in project-f66cg-quebec (npm)
- Aug 14, 2025
Malicious code in project-f4zta-hotel (npm)
- Aug 14, 2025
Malicious code in project-f49sn-yam (npm)
- Aug 14, 2025
Malicious code in project-f47gg-bravo (npm)
- Aug 14, 2025
Malicious code in project-f44kj-india (npm)
- Aug 14, 2025
Malicious code in project-f3h2l-lima (npm)
- Aug 14, 2025
Malicious code in project-f2wtw-delta (npm)
- Aug 14, 2025
Malicious code in project-esd7w-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ermrw-raspberry (npm)
- Aug 14, 2025
Malicious code in project-eqz84-whiskey (npm)
- Aug 14, 2025
Malicious code in project-eqw62-whiskey (npm)
Page 5418 of 6,664