Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zittertea/ipsam-possimus-repellendus (npm)
- Aug 14, 2025
Malicious code in @zittertea/in-perferendis-voluptatum (npm)
- Aug 14, 2025
Malicious code in @zittertea/id-possimus-ipsa-veritatis (npm)
- Aug 14, 2025
Malicious code in @zittertea/expedita-ullam-modi (npm)
- Aug 14, 2025
Malicious code in @zittertea/excepturi-laboriosam-vitae-atque (npm)
- Aug 14, 2025
Malicious code in @zittertea/ex-blanditiis-dolore (npm)
- Aug 14, 2025
Malicious code in @zittertea/ex-autem-sequi (npm)
- Aug 14, 2025
Malicious code in @zittertea/eveniet-optio-incidunt (npm)
- Aug 14, 2025
Malicious code in @zittertea/earum-consectetur-quos-architecto (npm)
- Aug 14, 2025
Malicious code in @zittertea/ducimus-exercitationem-autem (npm)
- Aug 14, 2025
Malicious code in @zittertea/dolores-sequi-recusandae (npm)
- Aug 14, 2025
Malicious code in @zittertea/dolorem-enim-soluta-animi (npm)
- Aug 14, 2025
Malicious code in @zittertea/distinctio-amet-deleniti-quo (npm)
- Aug 14, 2025
Malicious code in @zittertea/dignissimos-harum-sint-alias (npm)
- Aug 14, 2025
Malicious code in @zittertea/deleniti-in-aspernatur-aut (npm)
- Aug 14, 2025
Malicious code in @zittertea/delectus-itaque-odio (npm)
- Aug 14, 2025
Malicious code in @zittertea/cupiditate-animi-tenetur-doloribus (npm)
- Aug 14, 2025
Malicious code in @zittertea/cupiditate-ad-fuga-minus (npm)
- Aug 14, 2025
Malicious code in @zittertea/consectetur-natus-hic (npm)
- Aug 14, 2025
Malicious code in @zittertea/autem-provident-delectus-libero (npm)
- Aug 14, 2025
Malicious code in @zittertea/architecto-cumque-incidunt (npm)
- Aug 14, 2025
Malicious code in @zittertea/architecto-consectetur-praesentium (npm)
- Aug 14, 2025
Malicious code in @zittertea/aperiam-illo-sed (npm)
- Aug 14, 2025
Malicious code in @zittertea/aliquam-veritatis-corrupti-ipsam (npm)
- Aug 14, 2025
Malicious code in @zittertea/accusantium-ullam-esse (npm)
- Aug 14, 2025
Malicious code in @zittertea/ab-officiis-consequuntur-labore (npm)
- Aug 14, 2025
Malicious code in @zittertea/ab-dolor-optio-sint (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ut (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-us (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-up (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-un (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-um (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ue (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ua (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u5 (npm)
Page 5714 of 6,634