Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in quito-private-oscillation-lacerta (npm)
- Aug 14, 2025
Malicious code in quito-outercore-repository-perseus (npm)
- Aug 14, 2025
Malicious code in quito-hydra-local-bellatrix (npm)
- Aug 14, 2025
Malicious code in quito-graviton-eslint-ursa (npm)
- Aug 14, 2025
Malicious code in quito-express-xenon-indus (npm)
- Aug 14, 2025
Malicious code in quito-eslint-config-octans-ophiuchus (npm)
- Aug 14, 2025
Malicious code in quito-cryovolcano-relay-csrf (npm)
- Aug 14, 2025
Malicious code in quintessence_zl5ym_46j82_evoke (npm)
- Aug 14, 2025
Malicious code in quintessence_w42vm_8dnb4_raven (npm)
- Aug 14, 2025
Malicious code in quintessence_pq1dc_tsnig_night (npm)
- Aug 14, 2025
Malicious code in quintessence_j08na_nagct_kismet (npm)
- Aug 14, 2025
Malicious code in quintessence_fv9lh_gotxm_wave (npm)
- Aug 14, 2025
Malicious code in quintessence_5cdlo_hydef_raven (npm)
- Aug 14, 2025
Malicious code in quintessence_0ujrr_z26vy_topaz (npm)
- Aug 14, 2025
Malicious code in quinoa-ziggurat-3b71 (npm)
- Aug 14, 2025
Malicious code in quinoa-yearling-iem3 (npm)
- Aug 14, 2025
Malicious code in quinoa-teak-uygu (npm)
- Aug 14, 2025
Malicious code in quinoa-quokka-bwuy (npm)
- Aug 14, 2025
Malicious code in quinoa-pier-vqjb (npm)
- Aug 14, 2025
Malicious code in quinoa-nutmeg-dc52 (npm)
- Aug 14, 2025
Malicious code in quinoa-november-xrp6 (npm)
- Aug 14, 2025
Malicious code in quinoa-galaxy-c35b (npm)
- Aug 14, 2025
Malicious code in quinoa-carrot-9ft6 (npm)
- Aug 14, 2025
Malicious code in quince-zulu-india-iqpjc (npm)
- Aug 14, 2025
Malicious code in quince-zucchini-cqvx (npm)
- Aug 14, 2025
Malicious code in quince-yam-rkef (npm)
- Aug 14, 2025
Malicious code in quince-xigua-romeo-elmco (npm)
- Aug 14, 2025
Malicious code in quince-whiskey-ggow (npm)
- Aug 14, 2025
Malicious code in quince-watermelon-yankee-bcsvi (npm)
- Aug 14, 2025
Malicious code in quince-vanilla-nectarine-haodk (npm)
- Aug 14, 2025
Malicious code in quince-uniform-dyra (npm)
- Aug 14, 2025
Malicious code in quince-ugli-mqyg (npm)
- Aug 14, 2025
Malicious code in quince-tn9-project (npm)
- Aug 14, 2025
Malicious code in quince-tango-yaqg (npm)
- Aug 14, 2025
Malicious code in quince-tangerine-hotel-gmxhr (npm)
- Aug 14, 2025
Malicious code in quince-t4d-project (npm)
- Aug 14, 2025
Malicious code in quince-smt-project (npm)
- Aug 14, 2025
Malicious code in quince-sierra-aedw (npm)
- Aug 14, 2025
Malicious code in quince-romeo-jjfl (npm)
- Aug 14, 2025
Malicious code in quince-raspberry-rijd (npm)
- Aug 14, 2025
Malicious code in quince-quebec-dggk (npm)
- Aug 14, 2025
Malicious code in quince-oscar-fnab (npm)
- Aug 14, 2025
Malicious code in quince-november-baza (npm)
- Aug 14, 2025
Malicious code in quince-nectarine-vngj (npm)
- Aug 14, 2025
Malicious code in quince-mike-kxog (npm)
- Aug 14, 2025
Malicious code in quince-lemon-apple-ejjoo (npm)
- Aug 14, 2025
Malicious code in quince-ktu-project (npm)
- Aug 14, 2025
Malicious code in quince-kio-project (npm)
- Aug 14, 2025
Malicious code in quince-jyw-project (npm)
- Aug 14, 2025
Malicious code in quince-india-hotel-fntdz (npm)
Page 5793 of 7,293