Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in quebec-uniform-vanilla-tpsel (npm)
- Aug 14, 2025
Malicious code in quebec-uniform-strawberry-ttgap (npm)
- Aug 14, 2025
Malicious code in quebec-ukf-project (npm)
- Aug 14, 2025
Malicious code in quebec-turnip-4vqj (npm)
- Aug 14, 2025
Malicious code in quebec-temple-r573 (npm)
- Aug 14, 2025
Malicious code in quebec-tangerine-ytjy (npm)
- Aug 14, 2025
Malicious code in quebec-tangerine-ydkp (npm)
- Aug 14, 2025
Malicious code in quebec-strawberry-lima-zihpp (npm)
- Aug 14, 2025
Malicious code in quebec-romeo-echo-sgsnh (npm)
- Aug 14, 2025
Malicious code in quebec-raspberry-lemon-vlrqb (npm)
- Aug 14, 2025
Malicious code in quebec-ra9-project (npm)
- Aug 14, 2025
Malicious code in quebec-qj3-project (npm)
- Aug 14, 2025
Malicious code in quebec-november-lemon-vjqjp (npm)
- Aug 14, 2025
Malicious code in quebec-mike-ugli-wlnxq (npm)
- Aug 14, 2025
Malicious code in quebec-mike-krjw (npm)
- Aug 14, 2025
Malicious code in quebec-lemon-bbuu (npm)
- Aug 14, 2025
Malicious code in quebec-kiwi-wujt (npm)
- Aug 14, 2025
Malicious code in quebec-kiwi-alle (npm)
- Aug 14, 2025
Malicious code in quebec-k27-project (npm)
- Aug 14, 2025
Malicious code in quebec-juliet-zciy (npm)
- Aug 14, 2025
Malicious code in quebec-india-cherry-flwtl (npm)
- Aug 14, 2025
Malicious code in quebec-i2u-project (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-ugli-jyjpb (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-fqdg (npm)
- Aug 14, 2025
Malicious code in quebec-hotel-banana-eehld (npm)
- Aug 14, 2025
Malicious code in quebec-honeydew-iqzb (npm)
- Aug 14, 2025
Malicious code in quebec-hdi-project (npm)
- Aug 14, 2025
Malicious code in quebec-golf-rdpm (npm)
- Aug 14, 2025
Malicious code in quebec-golf-papa-sdohw (npm)
- Aug 14, 2025
Malicious code in quebec-foxtrot-vanilla-gtfnb (npm)
- Aug 14, 2025
Malicious code in quebec-foxtrot-nwra (npm)
- Aug 14, 2025
Malicious code in quebec-fig-watermelon-xlykd (npm)
- Aug 14, 2025
Malicious code in quebec-ehn-project (npm)
- Aug 14, 2025
Malicious code in quebec-delta-gome (npm)
- Aug 14, 2025
Malicious code in quebec-date-qvyd (npm)
- Aug 14, 2025
Malicious code in quebec-cherry-orange-kjngy (npm)
- Aug 14, 2025
Malicious code in quebec-charlie-zvel (npm)
- Aug 14, 2025
Malicious code in quebec-cbb-project (npm)
- Aug 14, 2025
Malicious code in quebec-bravo-vvxu (npm)
- Aug 14, 2025
Malicious code in quebec-bravo-alpha-pfoee (npm)
- Aug 14, 2025
Malicious code in quebec-banana-mango-mlfgl (npm)
- Aug 14, 2025
Malicious code in quebec-9br-project (npm)
- Aug 14, 2025
Malicious code in quebec-5c4-project (npm)
- Aug 14, 2025
Malicious code in quebec-2q2-project (npm)
- Aug 14, 2025
Malicious code in quebec-1qu-project (npm)
- Aug 14, 2025
Malicious code in quasarjet-mechatronics-stratosphere-abiogenesis (npm)
- Aug 14, 2025
Malicious code in quasarjet-capella-dione-europa (npm)
- Aug 14, 2025
Malicious code in quasar_th3hh_l1o3f_molecule (npm)
- Aug 14, 2025
Malicious code in quasar_s27fy_a67dm_harmony (npm)
- Aug 14, 2025
Malicious code in quasar_r8oku_v6cfo_pulse (npm)
Page 5796 of 7,293