Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-2fanj-delta (npm)
- Aug 14, 2025
Malicious code in project-2e2c3-cherry (npm)
- Aug 14, 2025
Malicious code in project-2czi3-mango (npm)
- Aug 14, 2025
Malicious code in project-2aq26-bravo (npm)
- Aug 14, 2025
Malicious code in project-2a1hg-echo (npm)
- Aug 14, 2025
Malicious code in project-29clo-zucchini (npm)
- Aug 14, 2025
Malicious code in project-27w8x-india (npm)
- Aug 14, 2025
Malicious code in project-26v5h-uniform (npm)
- Aug 14, 2025
Malicious code in project-25v7a-uniform (npm)
- Aug 14, 2025
Malicious code in project-25pjr-mike (npm)
- Aug 14, 2025
Malicious code in project-24kl1-romeo (npm)
- Aug 14, 2025
Malicious code in project-22m3w-xigua (npm)
- Aug 14, 2025
Malicious code in project-20n3m-tango (npm)
- Aug 14, 2025
Malicious code in project-1zz1k-oscar (npm)
- Aug 14, 2025
Malicious code in project-1yxy0-vanilla (npm)
- Aug 14, 2025
Malicious code in project-1y4pf-honeydew (npm)
- Aug 14, 2025
Malicious code in project-1xjaf-bravo (npm)
- Aug 14, 2025
Malicious code in project-1wjmb-lemon (npm)
- Aug 14, 2025
Malicious code in project-1w4dp-yam (npm)
- Aug 14, 2025
Malicious code in project-1v1ho-charlie (npm)
- Aug 14, 2025
Malicious code in project-1rqtz-zucchini (npm)
- Aug 14, 2025
Malicious code in project-1rcsj-grape (npm)
- Aug 14, 2025
Malicious code in project-1qbjl-delta (npm)
- Aug 14, 2025
Malicious code in project-1ps6f-mango (npm)
- Aug 14, 2025
Malicious code in project-1ooxy-juliet (npm)
- Aug 14, 2025
Malicious code in project-1mod4-zulu (npm)
- Aug 14, 2025
Malicious code in project-1j0h6-date (npm)
- Aug 14, 2025
Malicious code in project-1im5d-india (npm)
- Aug 14, 2025
Malicious code in project-1ihis-zucchini (npm)
- Aug 14, 2025
Malicious code in project-1i1ua-lemon (npm)
- Aug 14, 2025
Malicious code in project-1h5t4-uniform (npm)
- Aug 14, 2025
Malicious code in project-1h3nh-elderberry (npm)
- Aug 14, 2025
Malicious code in project-1fatd-mango (npm)
- Aug 14, 2025
Malicious code in project-1czc0-victor (npm)
- Aug 14, 2025
Malicious code in project-1bryj-fig (npm)
- Aug 14, 2025
Malicious code in project-1atcw-honeydew (npm)
- Aug 14, 2025
Malicious code in project-1aceg-nectarine (npm)
- Aug 14, 2025
Malicious code in project-19x3g-date (npm)
- Aug 14, 2025
Malicious code in project-19nbd-india (npm)
- Aug 14, 2025
Malicious code in project-11rhz-kiwi (npm)
- Aug 14, 2025
Malicious code in project-0z48x-xigua (npm)
- Aug 14, 2025
Malicious code in project-0yueg-zulu (npm)
- Aug 14, 2025
Malicious code in project-0ypjs-orange (npm)
- Aug 14, 2025
Malicious code in project-0stfj-cherry (npm)
- Aug 14, 2025
Malicious code in project-0q6tz-quebec (npm)
- Aug 14, 2025
Malicious code in project-0n1a6-xigua (npm)
- Aug 14, 2025
Malicious code in project-0mqk9-nectarine (npm)
- Aug 14, 2025
Malicious code in project-0kdqu-papaya (npm)
- Aug 14, 2025
Malicious code in project-0ixuj-vanilla (npm)
- Aug 14, 2025
Malicious code in project-0iwg5-juliet (npm)
Page 5426 of 6,664