Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-d3ejt-zulu (npm)
- Aug 14, 2025
Malicious code in project-d37c3-grape (npm)
- Aug 14, 2025
Malicious code in project-d28fd-grape (npm)
- Aug 14, 2025
Malicious code in project-d1l71-date (npm)
- Aug 14, 2025
Malicious code in project-d17o2-mike (npm)
- Aug 14, 2025
Malicious code in project-cyhgq-oscar (npm)
- Aug 14, 2025
Malicious code in project-cyhg7-echo (npm)
- Aug 14, 2025
Malicious code in project-cv3mg-tango (npm)
- Aug 14, 2025
Malicious code in project-cu506-bravo (npm)
- Aug 14, 2025
Malicious code in project-csqvr-victor (npm)
- Aug 14, 2025
Malicious code in project-cpi7a-bravo (npm)
- Aug 14, 2025
Malicious code in project-cpak2-papaya (npm)
- Aug 14, 2025
Malicious code in project-cmw2e-quince (npm)
- Aug 14, 2025
Malicious code in project-cmoc0-lima (npm)
- Aug 14, 2025
Malicious code in project-cmdfc-grape (npm)
- Aug 14, 2025
Malicious code in project-cm1ly-bravo (npm)
- Aug 14, 2025
Malicious code in project-ck6sc-yam (npm)
- Aug 14, 2025
Malicious code in project-cjwwt-kiwi (npm)
- Aug 14, 2025
Malicious code in project-cjf86-papa (npm)
- Aug 14, 2025
Malicious code in project-ci2f4-fig (npm)
- Aug 14, 2025
Malicious code in project-chsfh-sierra (npm)
- Aug 14, 2025
Malicious code in project-ch7da-uniform (npm)
- Aug 14, 2025
Malicious code in project-cgz2l-oscar (npm)
- Aug 14, 2025
Malicious code in project-cgs9j-delta (npm)
- Aug 14, 2025
Malicious code in project-cgdpo-uniform (npm)
- Aug 14, 2025
Malicious code in project-cg4kc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ceo51-papaya (npm)
- Aug 14, 2025
Malicious code in project-ce5ak-cherry (npm)
- Aug 14, 2025
Malicious code in project-ce4hc-tangerine (npm)
- Aug 14, 2025
Malicious code in project-cdkcd-yam (npm)
- Aug 14, 2025
Malicious code in project-cc1yq-mike (npm)
- Aug 14, 2025
Malicious code in project-ca5tp-elderberry (npm)
- Aug 14, 2025
Malicious code in project-c9eaj-papa (npm)
- Aug 14, 2025
Malicious code in project-c89uq-lemon (npm)
- Aug 14, 2025
Malicious code in project-c81n0-apple (npm)
- Aug 14, 2025
Malicious code in project-c6ntc-raspberry (npm)
- Aug 14, 2025
Malicious code in project-c6g3g-vanilla (npm)
- Aug 14, 2025
Malicious code in project-c6d0i-banana (npm)
- Aug 14, 2025
Malicious code in project-c5qtq-tango (npm)
- Aug 14, 2025
Malicious code in project-c3ful-lemon (npm)
- Aug 14, 2025
Malicious code in project-c0upq-ugli (npm)
- Aug 14, 2025
Malicious code in project-bzv6s-romeo (npm)
- Aug 14, 2025
Malicious code in project-bwwob-strawberry (npm)
- Aug 14, 2025
Malicious code in project-bvczs-yankee (npm)
- Aug 14, 2025
Malicious code in project-buyzi-mango (npm)
- Aug 14, 2025
Malicious code in project-busli-delta (npm)
- Aug 14, 2025
Malicious code in project-bun0r-tango (npm)
- Aug 14, 2025
Malicious code in project-bs70f-grape (npm)
- Aug 14, 2025
Malicious code in project-brtsu-victor (npm)
- Aug 14, 2025
Malicious code in project-brh0c-raspberry (npm)
Page 5420 of 6,664