Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in allianz-neo (npm)
- Aug 14, 2025
Malicious code in allcodes (npm)
- Aug 14, 2025
Malicious code in allcash (npm)
- Aug 14, 2025
Malicious code in allbook (npm)
- Aug 14, 2025
Malicious code in alkdsjf (npm)
- Aug 14, 2025
Malicious code in aliya-database (npm)
- Aug 14, 2025
Malicious code in aliya-anup (npm)
- Aug 14, 2025
Malicious code in alipayjsapi (npm)
- Aug 14, 2025
Malicious code in alior-styles (npm)
- Aug 14, 2025
Malicious code in alinova (npm)
- Aug 14, 2025
Malicious code in alinaseh (npm)
- Aug 14, 2025
Malicious code in alicov (npm)
- Aug 14, 2025
Malicious code in alicon (npm)
- Aug 14, 2025
Malicious code in alico (npm)
- Aug 14, 2025
Malicious code in alicaptor (npm)
- Aug 14, 2025
Malicious code in alibata (npm)
- Aug 14, 2025
Malicious code in ali-contributors (npm)
- Aug 14, 2025
Malicious code in ali-contributor (npm)
- Aug 14, 2025
Malicious code in algomath (npm)
- Aug 14, 2025
Malicious code in algol-sagitta-sass-loader-jovian (npm)
- Aug 14, 2025
Malicious code in algol-forever-less-exoplanet (npm)
- Aug 14, 2025
Malicious code in algol-duplex-winston-mui (npm)
- Aug 14, 2025
Malicious code in algol-centaurus-less-betelgeuse (npm)
- Aug 14, 2025
Malicious code in algol-atlas-bionics-ultra (npm)
- Aug 14, 2025
Malicious code in algoera (npm)
- Aug 14, 2025
Malicious code in algodoo (npm)
- Aug 14, 2025
Malicious code in algerb (npm)
- Aug 14, 2025
Malicious code in alface (npm)
- Aug 14, 2025
Malicious code in alexr-locator-test (npm)
- Aug 14, 2025
Malicious code in alexbirsantest (npm)
- Aug 14, 2025
Malicious code in alexandrevvotest2 (npm)
- Aug 14, 2025
Malicious code in alexandrevvotest (npm)
- Aug 14, 2025
Malicious code in alerttest (npm)
- Aug 14, 2025
Malicious code in AlertLogic (npm)
- Aug 14, 2025
Malicious code in alerte (npm)
- Aug 14, 2025
Malicious code in alegier (npm)
- Aug 14, 2025
Malicious code in aldpjigfknkzvwry (npm)
- Aug 14, 2025
Malicious code in aldebaran-rocket-hyperion-wezen (npm)
- Aug 14, 2025
Malicious code in aldebaran-hologram-resonance-enif (npm)
- Aug 14, 2025
Malicious code in aldebaran-antd-babel-futurology (npm)
- Aug 14, 2025
Malicious code in alcquery (npm)
- Aug 14, 2025
Malicious code in alchemy_tzh7o_dpfx8_whirlwind (npm)
- Aug 14, 2025
Malicious code in alchemy_ttdza_0m309_nebula (npm)
- Aug 14, 2025
Malicious code in alchemy_f5b90_dctgw_quartz (npm)
- Aug 14, 2025
Malicious code in alchemy_99hu1_am3qx_coral (npm)
- Aug 14, 2025
Malicious code in alchemy_7su4d_t39hw_antelope (npm)
- Aug 14, 2025
Malicious code in alchemy-s89r2-1zvdy-lucid-project (npm)
- Aug 14, 2025
Malicious code in alchemy-rg5mi-8o61m-gale-project (npm)
- Aug 14, 2025
Malicious code in alchemy-o0bup-rj9h1-drift-project (npm)
- Aug 14, 2025
Malicious code in alchemy-in4kp-dbli8-quasar-project (npm)
Page 5705 of 6,634