Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in apple-yankee-mbaa (npm)
- Aug 14, 2025
Malicious code in apple-yam-kusc (npm)
- Aug 14, 2025
Malicious code in apple-xwq-project (npm)
- Aug 14, 2025
Malicious code in apple-xta-project (npm)
- Aug 14, 2025
Malicious code in apple-wek-project (npm)
- Aug 14, 2025
Malicious code in apple-watermelon-vanilla-lwavc (npm)
- Aug 14, 2025
Malicious code in apple-vm1-project (npm)
- Aug 14, 2025
Malicious code in apple-victor-nrgc (npm)
- Aug 14, 2025
Malicious code in apple-vanilla-uknp (npm)
- Aug 14, 2025
Malicious code in apple-vanilla-qkbb (npm)
- Aug 14, 2025
Malicious code in apple-uz8-project (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-tryf (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-papaya-vehsm (npm)
- Aug 14, 2025
Malicious code in apple-tangerine-ltdn (npm)
- Aug 14, 2025
Malicious code in apple-sierra-vckp (npm)
- Aug 14, 2025
Malicious code in apple-rlu-project (npm)
- Aug 14, 2025
Malicious code in apple-raspberry-bakh (npm)
- Aug 14, 2025
Malicious code in apple-quince-hkra (npm)
- Aug 14, 2025
Malicious code in apple-pk0-project (npm)
- Aug 14, 2025
Malicious code in apple-oscar-uttn (npm)
- Aug 14, 2025
Malicious code in apple-orange-banana-kpynd (npm)
- Aug 14, 2025
Malicious code in apple-nrw-project (npm)
- Aug 14, 2025
Malicious code in apple-november-xblr (npm)
- Aug 14, 2025
Malicious code in apple-nectarine-whiskey-tivzq (npm)
- Aug 14, 2025
Malicious code in apple-mike-banana-lzpuo (npm)
- Aug 14, 2025
Malicious code in apple-mike-abvo (npm)
- Aug 14, 2025
Malicious code in apple-mango-yjwr (npm)
- Aug 14, 2025
Malicious code in apple-mango-yam-inhns (npm)
- Aug 14, 2025
Malicious code in apple-mango-quince-wmfae (npm)
- Aug 14, 2025
Malicious code in apple-lrl-project (npm)
- Aug 14, 2025
Malicious code in apple-lemon-oscar-atxoe (npm)
- Aug 14, 2025
Malicious code in apple-kum-project (npm)
- Aug 14, 2025
Malicious code in apple-kangaroo-pj2g (npm)
- Aug 14, 2025
Malicious code in apple-k27-project (npm)
- Aug 14, 2025
Malicious code in apple-india-rtro (npm)
- Aug 14, 2025
Malicious code in apple-india-mdtr (npm)
- Aug 14, 2025
Malicious code in apple-harbor-06we (npm)
- Aug 14, 2025
Malicious code in apple-grape-bjyq (npm)
- Aug 14, 2025
Malicious code in apple-fig-pkxm (npm)
- Aug 14, 2025
Malicious code in apple-fig-india-uecxa (npm)
- Aug 14, 2025
Malicious code in apple-elderberry-rslf (npm)
- Aug 14, 2025
Malicious code in apple-e4v-project (npm)
- Aug 14, 2025
Malicious code in apple-delta-ohyg (npm)
- Aug 14, 2025
Malicious code in apple-date-quince-qnivq (npm)
- Aug 14, 2025
Malicious code in apple-date-hhyd (npm)
- Aug 14, 2025
Malicious code in apple-charlie-ugli-uicpb (npm)
- Aug 14, 2025
Malicious code in apple-carrot-fzlq (npm)
- Aug 14, 2025
Malicious code in apple-bravo-pfsh (npm)
- Aug 14, 2025
Malicious code in apple-3zd-project (npm)
- Aug 14, 2025
Malicious code in apple-2zb-project (npm)
Page 5697 of 6,634