Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-4cqey-date (npm)
- Aug 14, 2025
Malicious code in project-4cmo9-papa (npm)
- Aug 14, 2025
Malicious code in project-4b3cm-zucchini (npm)
- Aug 14, 2025
Malicious code in project-49xb3-ugli (npm)
- Aug 14, 2025
Malicious code in project-47vx0-nectarine (npm)
- Aug 14, 2025
Malicious code in project-45a0a-kiwi (npm)
- Aug 14, 2025
Malicious code in project-42ahw-sierra (npm)
- Aug 14, 2025
Malicious code in project-41pqi-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-3zep0-vanilla (npm)
- Aug 14, 2025
Malicious code in project-3y0e6-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-3xg2z-zucchini (npm)
- Aug 14, 2025
Malicious code in project-3vee9-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3umgz-victor (npm)
- Aug 14, 2025
Malicious code in project-3tlw2-raspberry (npm)
- Aug 14, 2025
Malicious code in project-3s5ei-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3roa3-oscar (npm)
- Aug 14, 2025
Malicious code in project-3q6x4-oscar (npm)
- Aug 14, 2025
Malicious code in project-3phhd-quince (npm)
- Aug 14, 2025
Malicious code in project-3o5x5-romeo (npm)
- Aug 14, 2025
Malicious code in project-3npxw-tango (npm)
- Aug 14, 2025
Malicious code in project-3mwm9-tango (npm)
- Aug 14, 2025
Malicious code in project-3l2as-echo (npm)
- Aug 14, 2025
Malicious code in project-3kzl3-juliet (npm)
- Aug 14, 2025
Malicious code in project-3ilck-lemon (npm)
- Aug 14, 2025
Malicious code in project-3ee1o-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3agi5-bravo (npm)
- Aug 14, 2025
Malicious code in project-39hf4-whiskey (npm)
- Aug 14, 2025
Malicious code in project-38yw3-mike (npm)
- Aug 14, 2025
Malicious code in project-38woq-yankee (npm)
- Aug 14, 2025
Malicious code in project-38mku-echo (npm)
- Aug 14, 2025
Malicious code in project-38awj-juliet (npm)
- Aug 14, 2025
Malicious code in project-387at-bravo (npm)
- Aug 14, 2025
Malicious code in project-37ejp-tangerine (npm)
- Aug 14, 2025
Malicious code in project-35ot3-mike (npm)
- Aug 14, 2025
Malicious code in project-34npr-romeo (npm)
- Aug 14, 2025
Malicious code in project-2zzbo-quince (npm)
- Aug 14, 2025
Malicious code in project-2zfpb-quebec (npm)
- Aug 14, 2025
Malicious code in project-2ycek-orange (npm)
- Aug 14, 2025
Malicious code in project-2s3gs-vanilla (npm)
- Aug 14, 2025
Malicious code in project-2rja4-echo (npm)
- Aug 14, 2025
Malicious code in project-2rbe0-kiwi (npm)
- Aug 14, 2025
Malicious code in project-2r3tf-strawberry (npm)
- Aug 14, 2025
Malicious code in project-2r0bk-india (npm)
- Aug 14, 2025
Malicious code in project-2qygm-lemon (npm)
- Aug 14, 2025
Malicious code in project-2ol8v-vanilla (npm)
- Aug 14, 2025
Malicious code in project-2modo-fig (npm)
- Aug 14, 2025
Malicious code in project-2kuhw-juliet (npm)
- Aug 14, 2025
Malicious code in project-2izp5-apple (npm)
- Aug 14, 2025
Malicious code in project-2fpur-fig (npm)
- Aug 14, 2025
Malicious code in project-2fifk-kiwi (npm)
Page 5425 of 6,664