Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in mldboxcgkvstaiyq (npm)
- Aug 14, 2025
Malicious code in mkyqhwcfvnzeksil (npm)
- Aug 14, 2025
Malicious code in mkfesydrknvcqupa (npm)
- Aug 14, 2025
Malicious code in mkdita (npm)
- Aug 14, 2025
Malicious code in mk23s (npm)
- Aug 14, 2025
Malicious code in mjstart (npm)
- Aug 14, 2025
Malicious code in mjml-i18n (npm)
- Aug 14, 2025
Malicious code in mjcd (npm)
- Aug 14, 2025
Malicious code in mjb-playground-publishing-a-npm-module (npm)
- Aug 14, 2025
Malicious code in mjb-playground-module-as-cli-tool (npm)
- Aug 14, 2025
Malicious code in MJackpots (npm)
- Aug 14, 2025
Malicious code in mizraith (npm)
- Aug 14, 2025
Malicious code in mixsupp (npm)
- Aug 14, 2025
Malicious code in mixinfunc (npm)
- Aug 14, 2025
Malicious code in mixedzone-nginx-auth-request (npm)
- Aug 14, 2025
Malicious code in mixedzone-curate-frontend-v3 (npm)
- Aug 14, 2025
Malicious code in mixed-lib (npm)
- Aug 14, 2025
Malicious code in mix-objects (npm)
- Aug 14, 2025
Malicious code in mitsuba (npm)
- Aug 14, 2025
Malicious code in mitklyczounpajsf (npm)
- Aug 14, 2025
Malicious code in mistet (npm)
- Aug 14, 2025
Malicious code in mist_z8m5i_gkdb0_jewel (npm)
- Aug 14, 2025
Malicious code in mist_vt5jl_211pf_unicorn (npm)
- Aug 14, 2025
Malicious code in mist_ixkyg_cxsyy_jigsaw (npm)
- Aug 14, 2025
Malicious code in mist_id7qt_nxx1t_wander (npm)
- Aug 14, 2025
Malicious code in mist_cb4m4_b89ly_harmonic (npm)
- Aug 14, 2025
Malicious code in mist_bwn3s_inudx_tempest (npm)
- Aug 14, 2025
Malicious code in mist-yonder-wlc934-project (npm)
- Aug 14, 2025
Malicious code in mist-yonder-sas137-project (npm)
- Aug 14, 2025
Malicious code in mist-xenon-cjk169-project (npm)
- Aug 14, 2025
Malicious code in mist-tornado-eom932-project (npm)
- Aug 14, 2025
Malicious code in mist-savanna-phk797-project (npm)
- Aug 14, 2025
Malicious code in mist-quasar-npa663-project (npm)
- Aug 14, 2025
Malicious code in mist-peony-jpa919-project (npm)
- Aug 14, 2025
Malicious code in mist-jacket-lpu021-project (npm)
- Aug 14, 2025
Malicious code in mist-horizon-uay490-project (npm)
- Aug 14, 2025
Malicious code in mist-honeycomb-inx517-project (npm)
- Aug 14, 2025
Malicious code in mist-glacier-hqj092-project (npm)
- Aug 14, 2025
Malicious code in mist-emerald-fgl003-project (npm)
- Aug 14, 2025
Malicious code in mist-dandelion-txt994-project (npm)
- Aug 14, 2025
Malicious code in misstoriz-record-a-thon (npm)
- Aug 14, 2025
Malicious code in mismatched-peer-deps-lvl1 (npm)
- Aug 14, 2025
Malicious code in miskol (npm)
- Aug 14, 2025
Malicious code in mishguru-api (npm)
- Aug 14, 2025
Malicious code in misere (npm)
- Aug 14, 2025
Malicious code in misdigest (npm)
- Aug 14, 2025
Malicious code in mis-zt (npm)
- Aug 14, 2025
Malicious code in mirvap (npm)
- Aug 14, 2025
Malicious code in mirvac (npm)
- Aug 14, 2025
Malicious code in mirrormug (npm)
Page 5461 of 6,634