Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in qictest (npm)
- Aug 14, 2025
Malicious code in qianxue (npm)
- Aug 14, 2025
Malicious code in qhxpkctaumyksfol (npm)
- Aug 14, 2025
Malicious code in qgrfsawkothjivyx (npm)
- Aug 14, 2025
Malicious code in qgdlmyptbojsaucr (npm)
- Aug 14, 2025
Malicious code in qfractals (npm)
- Aug 14, 2025
Malicious code in qfkaeixcdbmjusyp (npm)
- Aug 14, 2025
Malicious code in qferdbosugcvwaik (npm)
- Aug 14, 2025
Malicious code in qfaungktekyiblhx (npm)
- Aug 14, 2025
Malicious code in qekmsupkzwcfovbj (npm)
- Aug 14, 2025
Malicious code in qdrant-node-js-basic-example (npm)
- Aug 14, 2025
Malicious code in qdnackkmxysezgpl (npm)
- Aug 14, 2025
Malicious code in qdlfxnguzpkjwbce (npm)
- Aug 14, 2025
Malicious code in qdigest (npm)
- Aug 14, 2025
Malicious code in qdgkitmswhjlxyoc (npm)
- Aug 14, 2025
Malicious code in qcipbatwzhosxrdf (npm)
- Aug 14, 2025
Malicious code in qcdn (npm)
- Aug 14, 2025
Malicious code in qbkyehxkluovdfmp (npm)
- Aug 14, 2025
Malicious code in qbirc-parser (npm)
- Aug 14, 2025
Malicious code in qbirc (npm)
- Aug 14, 2025
Malicious code in qasocial (npm)
- Aug 14, 2025
Malicious code in qartod (npm)
- Aug 14, 2025
Malicious code in qapp (npm)
- Aug 14, 2025
Malicious code in qanreoytksjkwxch (npm)
- Aug 14, 2025
Malicious code in qaceozkygxufhwin (npm)
- Aug 14, 2025
Malicious code in qaccel (npm)
- Aug 14, 2025
Malicious code in qabdtkezrxshfwmk (npm)
- Aug 14, 2025
Malicious code in q6zurtxfqrja6rzdzlogdgef8khb3mqm (npm)
- Aug 14, 2025
Malicious code in q2-platform (npm)
- Aug 14, 2025
Malicious code in q-ctrl (npm)
- Aug 14, 2025
Malicious code in pztkdsowqrbyivnf (npm)
- Aug 14, 2025
Malicious code in pzgrcvyiowtsknhx (npm)
- Aug 14, 2025
Malicious code in pyxis-geomorphology-equinox-quantumfoam (npm)
- Aug 14, 2025
Malicious code in pyxis-charon-darkmatter-orogeny (npm)
- Aug 14, 2025
Malicious code in pyxis-antimatter-dotenv-parse-variables-xenos (npm)
- Aug 14, 2025
Malicious code in pyxdlorsvzbfumek (npm)
- Aug 14, 2025
Malicious code in pywinusb (npm)
- Aug 14, 2025
Malicious code in pywebqq (npm)
- Aug 14, 2025
Malicious code in pywebmoc (npm)
- Aug 14, 2025
Malicious code in pywdboirngkuljch (npm)
- Aug 14, 2025
Malicious code in pywalley (npm)
- Aug 14, 2025
Malicious code in pytris (npm)
- Aug 14, 2025
Malicious code in pytrec (npm)
- Aug 14, 2025
Malicious code in pytrakt (npm)
- Aug 14, 2025
Malicious code in pytmux (npm)
- Aug 14, 2025
Malicious code in pythoneze (npm)
- Aug 14, 2025
Malicious code in python-shuju-keshihua-xuexi-shouce (npm)
- Aug 14, 2025
Malicious code in python-shuju-keshihua-miji (npm)
- Aug 14, 2025
Malicious code in pytave (npm)
- Aug 14, 2025
Malicious code in pystil (npm)
Page 5801 of 7,293