Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,197 total in npm · sorted newest first- Aug 14, 2025
Malicious code in project-0ip1w-quebec (npm)
- Aug 14, 2025
Malicious code in project-0ha9h-quebec (npm)
- Aug 14, 2025
Malicious code in project-0h76v-elderberry (npm)
- Aug 14, 2025
Malicious code in project-0aowd-ugli (npm)
- Aug 14, 2025
Malicious code in project-09exa-charlie (npm)
- Aug 14, 2025
Malicious code in project-06t1i-charlie (npm)
- Aug 14, 2025
Malicious code in project-06jzn-elderberry (npm)
- Aug 14, 2025
Malicious code in project-05wfh-lima (npm)
- Aug 14, 2025
Malicious code in project-034zs-whiskey (npm)
- Aug 14, 2025
Malicious code in project-02avc-golf (npm)
- Aug 14, 2025
Malicious code in project-00e6y-whiskey (npm)
- Aug 14, 2025
Malicious code in projcpp (npm)
- Aug 14, 2025
Malicious code in projavax (npm)
- Aug 14, 2025
Malicious code in progressive-web-app (npm)
- Aug 14, 2025
Malicious code in programa (npm)
- Aug 14, 2025
Malicious code in progken (npm)
- Aug 14, 2025
Malicious code in profile-reconcilliation-applet (npm)
- Aug 14, 2025
Malicious code in proficio (npm)
- Aug 14, 2025
Malicious code in proffart (npm)
- Aug 14, 2025
Malicious code in profesia-cd-components (npm)
- Aug 14, 2025
Malicious code in products-api (npm)
- Aug 14, 2025
Malicious code in production_registry_client (npm)
- Aug 14, 2025
Malicious code in productbundlesserv (npm)
- Aug 14, 2025
Malicious code in product-api (npm)
- Aug 14, 2025
Malicious code in prodreg (npm)
- Aug 14, 2025
Malicious code in prodigy-salesforce-module (npm)
- Aug 14, 2025
Malicious code in procyon-singularitarianism-farout-panspermia (npm)
- Aug 14, 2025
Malicious code in procyon-perseus-vortex-paleoecology (npm)
- Aug 14, 2025
Malicious code in procyon-parcel-ursa-cosmiconfig (npm)
- Aug 14, 2025
Malicious code in procyon-neptune-eridanus-archaeometry (npm)
- Aug 14, 2025
Malicious code in procyon-lynx-areology-public (npm)
- Aug 14, 2025
Malicious code in procyon-leda-nodejs-exec (npm)
- Aug 14, 2025
Malicious code in procyon-jasmine-nodejs-darkenergy (npm)
- Aug 14, 2025
Malicious code in procyon-grunt-backend-selenium (npm)
- Aug 14, 2025
Malicious code in procyon-gemini-karma-playwright (npm)
- Aug 14, 2025
Malicious code in procyon-eslint-plugin-on-xanthus (npm)
- Aug 14, 2025
Malicious code in procyon-dagda-hawkingradiation-antd (npm)
- Aug 14, 2025
Malicious code in procyon-bellatrix-electron-builder-phoebe (npm)
- Aug 14, 2025
Malicious code in proculo (npm)
- Aug 14, 2025
Malicious code in proctor-website (npm)
- Aug 14, 2025
Malicious code in process-work-web-web (npm)
- Aug 14, 2025
Malicious code in process-work-web (npm)
- Aug 14, 2025
Malicious code in process-work (npm)
- Aug 14, 2025
Malicious code in process-standard64 (npm)
- Aug 14, 2025
Malicious code in process-standard18 (npm)
- Aug 14, 2025
Malicious code in process-standard12 (npm)
- Aug 14, 2025
Malicious code in process-standard (npm)
- Aug 14, 2025
Malicious code in process-primatology-lepton-bellatrix (npm)
- Aug 14, 2025
Malicious code in process-cpu4 (npm)
- Aug 14, 2025
Malicious code in process-cpu2 (npm)
Page 5427 of 6,664