Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in milkilo (npm)
- Aug 14, 2025
Malicious code in mikenchin (npm)
- Aug 14, 2025
Malicious code in mike-zulu-qvkd (npm)
- Aug 14, 2025
Malicious code in mike-zpg-project (npm)
- Aug 14, 2025
Malicious code in mike-yje-project (npm)
- Aug 14, 2025
Malicious code in mike-xray-kanv (npm)
- Aug 14, 2025
Malicious code in mike-whiskey-jddk (npm)
- Aug 14, 2025
Malicious code in mike-watermelon-zhrx (npm)
- Aug 14, 2025
Malicious code in mike-w8h-project (npm)
- Aug 14, 2025
Malicious code in mike-volcano-atvw (npm)
- Aug 14, 2025
Malicious code in mike-vk3-project (npm)
- Aug 14, 2025
Malicious code in mike-victor-okar (npm)
- Aug 14, 2025
Malicious code in mike-va3-project (npm)
- Aug 14, 2025
Malicious code in mike-uniform-xxoy (npm)
- Aug 14, 2025
Malicious code in mike-uniform-m8js (npm)
- Aug 14, 2025
Malicious code in mike-ugli-vugs (npm)
- Aug 14, 2025
Malicious code in mike-ugli-rhfr (npm)
- Aug 14, 2025
Malicious code in mike-ugli-qmdp (npm)
- Aug 14, 2025
Malicious code in mike-ugli-ltwa (npm)
- Aug 14, 2025
Malicious code in mike-tango-7x3a (npm)
- Aug 14, 2025
Malicious code in mike-tangerine-toic (npm)
- Aug 14, 2025
Malicious code in mike-romeo-zwhd (npm)
- Aug 14, 2025
Malicious code in mike-romeo-ipmm (npm)
- Aug 14, 2025
Malicious code in mike-raspberry-xfux (npm)
- Aug 14, 2025
Malicious code in mike-rainbow-ueqd (npm)
- Aug 14, 2025
Malicious code in mike-quince-echo-uxgyg (npm)
- Aug 14, 2025
Malicious code in mike-qhs-project (npm)
- Aug 14, 2025
Malicious code in mike-parsnip-npkj (npm)
- Aug 14, 2025
Malicious code in mike-oscar-juliet-fklye (npm)
- Aug 14, 2025
Malicious code in mike-oscar-avlx (npm)
- Aug 14, 2025
Malicious code in mike-nutmeg-nyxz (npm)
- Aug 14, 2025
Malicious code in mike-november-date-djgbq (npm)
- Aug 14, 2025
Malicious code in mike-nex-project (npm)
- Aug 14, 2025
Malicious code in mike-mvg-project (npm)
- Aug 14, 2025
Malicious code in mike-lio-project (npm)
- Aug 14, 2025
Malicious code in mike-lima-fvqp (npm)
- Aug 14, 2025
Malicious code in mike-ley-project (npm)
- Aug 14, 2025
Malicious code in mike-l69-project (npm)
- Aug 14, 2025
Malicious code in mike-kv3-project (npm)
- Aug 14, 2025
Malicious code in mike-ko0-project (npm)
- Aug 14, 2025
Malicious code in mike-kiwi-romeo-owume (npm)
- Aug 14, 2025
Malicious code in mike-juliet-uniform-xwrzr (npm)
- Aug 14, 2025
Malicious code in mike-honeydew-sqbt (npm)
- Aug 14, 2025
Malicious code in mike-hgq-project (npm)
- Aug 14, 2025
Malicious code in mike-golf-mlvp (npm)
- Aug 14, 2025
Malicious code in mike-foxtrot-delta-nmfwc (npm)
- Aug 14, 2025
Malicious code in mike-fig-ivpk (npm)
- Aug 14, 2025
Malicious code in mike-equinox-b53f (npm)
- Aug 14, 2025
Malicious code in mike-e6a-project (npm)
- Aug 14, 2025
Malicious code in mike-date-bvon (npm)
Page 5464 of 6,634