Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in alpha-lima-ogju (npm)
- Aug 14, 2025
Malicious code in alpha-lima-090t (npm)
- Aug 14, 2025
Malicious code in alpha-lemon-kiwi-ewiak (npm)
- Aug 14, 2025
Malicious code in alpha-kilo-whiskey-glryh (npm)
- Aug 14, 2025
Malicious code in alpha-juliet-ygjk (npm)
- Aug 14, 2025
Malicious code in alpha-jqg-project (npm)
- Aug 14, 2025
Malicious code in alpha-jpx-project (npm)
- Aug 14, 2025
Malicious code in alpha-horseradish-20ha (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-zucchini-dhnsr (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-whiskey-kgxfc (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-kxxc (npm)
- Aug 14, 2025
Malicious code in alpha-grape-quince-wnoma (npm)
- Aug 14, 2025
Malicious code in alpha-golf-sihv (npm)
- Aug 14, 2025
Malicious code in alpha-gjs-project (npm)
- Aug 14, 2025
Malicious code in alpha-foxtrot-zlmy (npm)
- Aug 14, 2025
Malicious code in alpha-foxtrot-tango-rucxx (npm)
- Aug 14, 2025
Malicious code in alpha-fig-hr5s (npm)
- Aug 14, 2025
Malicious code in alpha-encrypt-process-alert-phi (npm)
- Aug 14, 2025
Malicious code in alpha-elderberry-cyfo (npm)
- Aug 14, 2025
Malicious code in alpha-eagle-er4t (npm)
- Aug 14, 2025
Malicious code in alpha-dwarf-7dhp (npm)
- Aug 14, 2025
Malicious code in alpha-d8y-project (npm)
- Aug 14, 2025
Malicious code in alpha-charlie-uniform-bjbtl (npm)
- Aug 14, 2025
Malicious code in alpha-car-wke3 (npm)
- Aug 14, 2025
Malicious code in alpha-bravo-06o1 (npm)
- Aug 14, 2025
Malicious code in alpha-banana-eudo (npm)
- Aug 14, 2025
Malicious code in alpha-9ly-project (npm)
- Aug 14, 2025
Malicious code in alpha-9lp-project (npm)
- Aug 14, 2025
Malicious code in alpha-7dd-project (npm)
- Aug 14, 2025
Malicious code in alpha-2wb-project (npm)
- Aug 14, 2025
Malicious code in alpha-1es-project (npm)
- Aug 14, 2025
Malicious code in alpha-0ai-project (npm)
- Aug 14, 2025
Malicious code in alpha-03t-project (npm)
- Aug 14, 2025
Malicious code in alouer (npm)
- Aug 14, 2025
Malicious code in alohye (npm)
- Aug 14, 2025
Malicious code in almworks (npm)
- Aug 14, 2025
Malicious code in almond-ziggurat-5bco (npm)
- Aug 14, 2025
Malicious code in almond-zamia-4ryi (npm)
- Aug 14, 2025
Malicious code in almond-sierra-rn4s (npm)
- Aug 14, 2025
Malicious code in almond-raspberry-fnt5 (npm)
- Aug 14, 2025
Malicious code in almond-nightingale-5bj8 (npm)
- Aug 14, 2025
Malicious code in almond-lima-w0mk (npm)
- Aug 14, 2025
Malicious code in almond-kale-ywzb (npm)
- Aug 14, 2025
Malicious code in almond-jalapeno-0efa (npm)
- Aug 14, 2025
Malicious code in almanan (npm)
- Aug 14, 2025
Malicious code in allthejs (npm)
- Aug 14, 2025
Malicious code in alloydemo (npm)
- Aug 14, 2025
Malicious code in alloy-widget-npm (npm)
- Aug 14, 2025
Malicious code in alloglot (npm)
- Aug 14, 2025
Malicious code in allocab-marvin (npm)
Page 5704 of 6,634