Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in qxierknpsbtofhja (npm)
- Aug 14, 2025
Malicious code in qxfwfd (npm)
- Aug 14, 2025
Malicious code in qwplzadyhvunjtgo (npm)
- Aug 14, 2025
Malicious code in qwortet (npm)
- Aug 14, 2025
Malicious code in qwepivnzosmkjryd (npm)
- Aug 14, 2025
Malicious code in qvukwtgfzoercxlp (npm)
- Aug 14, 2025
Malicious code in quxlhdvgksrwmcjp (npm)
- Aug 14, 2025
Malicious code in qute-tea (npm)
- Aug 14, 2025
Malicious code in qutaccess (npm)
- Aug 14, 2025
Malicious code in quotly (npm)
- Aug 14, 2025
Malicious code in quotebase (npm)
- Aug 14, 2025
Malicious code in quote-2 (npm)
- Aug 14, 2025
Malicious code in quota_tracker_ruby (npm)
- Aug 14, 2025
Malicious code in quokka-ziggurat-9yyt (npm)
- Aug 14, 2025
Malicious code in quokka-yankee-fy0o (npm)
- Aug 14, 2025
Malicious code in quokka-xenon-ypi7 (npm)
- Aug 14, 2025
Malicious code in quokka-quebec-9d0l (npm)
- Aug 14, 2025
Malicious code in quokka-mushroom-rdn2 (npm)
- Aug 14, 2025
Malicious code in quokka-eggplant-qcqy (npm)
- Aug 14, 2025
Malicious code in quokka-dock-ovyg (npm)
- Aug 14, 2025
Malicious code in quokka-castle-tkkj (npm)
- Aug 14, 2025
Malicious code in quokka-bark-krv5 (npm)
- Aug 14, 2025
Malicious code in quokka-asteroid-8vwb (npm)
- Aug 14, 2025
Malicious code in quizzzz (npm)
- Aug 14, 2025
Malicious code in quizui (npm)
- Aug 14, 2025
Malicious code in quizsort (npm)
- Aug 14, 2025
Malicious code in quizol (npm)
- Aug 14, 2025
Malicious code in quizme (npm)
- Aug 14, 2025
Malicious code in quizharry (npm)
- Aug 14, 2025
Malicious code in quizegame (npm)
- Aug 14, 2025
Malicious code in quizdsl (npm)
- Aug 14, 2025
Malicious code in quiver_vd9q1_v5xfi_quarry (npm)
- Aug 14, 2025
Malicious code in quiver_rco8o_fl7j5_elephant (npm)
- Aug 14, 2025
Malicious code in quiver_qr5se_607lq_trill (npm)
- Aug 14, 2025
Malicious code in quiver_qdr9c_79wrv_xenolith (npm)
- Aug 14, 2025
Malicious code in quiver_oragi_k5skk_molecule (npm)
- Aug 14, 2025
Malicious code in quiver_ohdgq_4v3yj_iris (npm)
- Aug 14, 2025
Malicious code in quiver_69fqk_iiixf_zodiac (npm)
- Aug 14, 2025
Malicious code in quiver-zxezj-iztvv-reef-project (npm)
- Aug 14, 2025
Malicious code in quiver-mg8a4-zwtku-xenon-project (npm)
- Aug 14, 2025
Malicious code in quiver-dogrx-ydr03-unity-project (npm)
- Aug 14, 2025
Malicious code in quiver-acguz-e10cj-yarn-project (npm)
- Aug 14, 2025
Malicious code in quiver-97clv-nni6m-glen-project (npm)
- Aug 14, 2025
Malicious code in quiver-91c8p-veerp-aurora-project (npm)
- Aug 14, 2025
Malicious code in quiver-7h4m8-w23rr-song-project (npm)
- Aug 14, 2025
Malicious code in quiver-5cpgy-htdke-phoenix-project (npm)
- Aug 14, 2025
Malicious code in quittance (npm)
- Aug 14, 2025
Malicious code in quito-subscription-gridsome-airbnb (npm)
- Aug 14, 2025
Malicious code in quito-spectroscopy-forever-fornax (npm)
- Aug 14, 2025
Malicious code in quito-puppeteer-hyperion-rollup-plugin (npm)
Page 5792 of 7,293