Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in india-zucchini-romeo-vvqdk (npm)
- Aug 14, 2025
Malicious code in india-yankee-wnki (npm)
- Aug 14, 2025
Malicious code in india-xyb-project (npm)
- Aug 14, 2025
Malicious code in india-xigua-mojx (npm)
- Aug 14, 2025
Malicious code in india-xigua-grape-fsony (npm)
- Aug 14, 2025
Malicious code in india-w82-project (npm)
- Aug 14, 2025
Malicious code in india-vanilla-kuqz (npm)
- Aug 14, 2025
Malicious code in india-uniform-idtv (npm)
- Aug 14, 2025
Malicious code in india-underpass-cna5 (npm)
- Aug 14, 2025
Malicious code in india-ugli-akih (npm)
- Aug 14, 2025
Malicious code in india-u7j-project (npm)
- Aug 14, 2025
Malicious code in india-to8-project (npm)
- Aug 14, 2025
Malicious code in india-tangerine-vcki (npm)
- Aug 14, 2025
Malicious code in india-tangerine-tygs (npm)
- Aug 14, 2025
Malicious code in india-strawberry-yam-fhydd (npm)
- Aug 14, 2025
Malicious code in india-strawberry-hotel-isgee (npm)
- Aug 14, 2025
Malicious code in india-strawberry-banana-vqdib (npm)
- Aug 14, 2025
Malicious code in india-sierra-papaya-hixcq (npm)
- Aug 14, 2025
Malicious code in india-sierra-bhsm (npm)
- Aug 14, 2025
Malicious code in india-r7w-project (npm)
- Aug 14, 2025
Malicious code in india-quince-vqzo (npm)
- Aug 14, 2025
Malicious code in india-pma-project (npm)
- Aug 14, 2025
Malicious code in india-papa-zulu-nryuc (npm)
- Aug 14, 2025
Malicious code in india-papa-runh (npm)
- Aug 14, 2025
Malicious code in india-oscar-cherry-jaoae (npm)
- Aug 14, 2025
Malicious code in india-nz1-project (npm)
- Aug 14, 2025
Malicious code in india-november-k3im (npm)
- Aug 14, 2025
Malicious code in india-nectarine-pvpq (npm)
- Aug 14, 2025
Malicious code in india-mike-hotel-iuqps (npm)
- Aug 14, 2025
Malicious code in india-mbr-project (npm)
- Aug 14, 2025
Malicious code in india-mango-apple-bbwex (npm)
- Aug 14, 2025
Malicious code in india-lima-charlie-slrga (npm)
- Aug 14, 2025
Malicious code in india-kwt-project (npm)
- Aug 14, 2025
Malicious code in india-kiwi-date-viqoy (npm)
- Aug 14, 2025
Malicious code in india-k9e-project (npm)
- Aug 14, 2025
Malicious code in india-juliet-orange-hxbfx (npm)
- Aug 14, 2025
Malicious code in india-juliet-gjly (npm)
- Aug 14, 2025
Malicious code in india-inferno-kafm (npm)
- Aug 14, 2025
Malicious code in india-hotel-tangerine-ihqvz (npm)
- Aug 14, 2025
Malicious code in india-grape-elderberry-notgb (npm)
- Aug 14, 2025
Malicious code in india-golf-dnji (npm)
- Aug 14, 2025
Malicious code in india-foxtrot-bqdg (npm)
- Aug 14, 2025
Malicious code in india-fir-8748 (npm)
- Aug 14, 2025
Malicious code in india-ferry-odt1 (npm)
- Aug 14, 2025
Malicious code in india-echo-szzu (npm)
- Aug 14, 2025
Malicious code in india-dwarf-sle1 (npm)
- Aug 14, 2025
Malicious code in india-delta-ybzv (npm)
- Aug 14, 2025
Malicious code in india-delta-tdin (npm)
- Aug 14, 2025
Malicious code in india-delta-ervi (npm)
- Aug 14, 2025
Malicious code in india-bravo-papa-lgddp (npm)
Page 5528 of 6,634