Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in azuremono (npm)
- Aug 14, 2025
Malicious code in azurefilter (npm)
- Aug 14, 2025
Malicious code in azurea (npm)
- Aug 14, 2025
Malicious code in azure-zmzzw-wtq35-crystal-project (npm)
- Aug 14, 2025
Malicious code in azure-wtint-vgql6-echo-project (npm)
- Aug 14, 2025
Malicious code in azure-uh9jg-05iqv-serenity-project (npm)
- Aug 14, 2025
Malicious code in azure-twd7a-qqy6v-ember-project (npm)
- Aug 14, 2025
Malicious code in azure-q679f-yokie-lunar-project (npm)
- Aug 14, 2025
Malicious code in azure-o849q-lxz68-flora-project (npm)
- Aug 14, 2025
Malicious code in azure-cf4v6-p75nc-uplift-project (npm)
- Aug 14, 2025
Malicious code in azure-azzus-78pnd-quasar-project (npm)
- Aug 14, 2025
Malicious code in azunyan (npm)
- Aug 14, 2025
Malicious code in aztogh (npm)
- Aug 14, 2025
Malicious code in azmovies (npm)
- Aug 14, 2025
Malicious code in azkaban_scheduler (npm)
- Aug 14, 2025
Malicious code in azienda (npm)
- Aug 14, 2025
Malicious code in azcylwbqdhknsexv (npm)
- Aug 14, 2025
Malicious code in azcoin (npm)
- Aug 14, 2025
Malicious code in azagra (npm)
- Aug 14, 2025
Malicious code in az-ext (npm)
- Aug 14, 2025
Malicious code in az-css (npm)
- Aug 14, 2025
Malicious code in az-bundler (npm)
- Aug 14, 2025
Malicious code in aystools (npm)
- Aug 14, 2025
Malicious code in aysnc (npm)
- Aug 14, 2025
Malicious code in aylobot (npm)
- Aug 14, 2025
Malicious code in ayabie (npm)
- Aug 14, 2025
Malicious code in axsrvuofnzhdctkq (npm)
- Aug 14, 2025
Malicious code in axserver (npm)
- Aug 14, 2025
Malicious code in axois (npm)
- Aug 14, 2025
Malicious code in axoeyob (npm)
- Aug 14, 2025
Malicious code in axlsort (npm)
- Aug 14, 2025
Malicious code in axioss (npm)
- Aug 14, 2025
Malicious code in axios-transport-quantum-computing-terraforming (npm)
- Aug 14, 2025
Malicious code in axios-repository-markdownlint-electron-builder (npm)
- Aug 14, 2025
Malicious code in axios-proteomics-superflare-frontend (npm)
- Aug 14, 2025
Malicious code in axios-http (npm)
- Aug 14, 2025
Malicious code in axios-ethology-indus-zenobia (npm)
- Aug 14, 2025
Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in axios-antimatter-nextjs-leda (npm)
- Aug 14, 2025
Malicious code in awsxten (npm)
- Aug 14, 2025
Malicious code in awsomer (npm)
- Aug 14, 2025
Malicious code in aws-xray-sdk-node (npm)
- Aug 14, 2025
Malicious code in aws-ui-runtime (npm)
- Aug 14, 2025
Malicious code in aws-toolkit-cloud9 (npm)
- Aug 14, 2025
Malicious code in aws-secure-zipper (npm)
- Aug 14, 2025
Malicious code in aws-pdk (npm)
- Aug 14, 2025
Malicious code in aws-lambda-authenticator (npm)
- Aug 14, 2025
Malicious code in aws-gulp-tasks (npm)
- Aug 14, 2025
Malicious code in aws-core-vscode (npm)
- Aug 14, 2025
Malicious code in aws-billing-console-angular (npm)
Page 5686 of 6,634