Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-y57qz-uniform (npm)
- Aug 14, 2025
Malicious code in project-y1x34-whiskey (npm)
- Aug 14, 2025
Malicious code in project-y07vl-xigua (npm)
- Aug 14, 2025
Malicious code in project-xzjzf-zucchini (npm)
- Aug 14, 2025
Malicious code in project-xyn05-uniform (npm)
- Aug 14, 2025
Malicious code in project-xwmvm-sierra (npm)
- Aug 14, 2025
Malicious code in project-xv4g0-date (npm)
- Aug 14, 2025
Malicious code in project-xv1va-xigua (npm)
- Aug 14, 2025
Malicious code in project-xul04-xray (npm)
- Aug 14, 2025
Malicious code in project-xtq9j-date (npm)
- Aug 14, 2025
Malicious code in project-xrn0v-watermelon (npm)
- Aug 14, 2025
Malicious code in project-xrgb2-honeydew (npm)
- Aug 14, 2025
Malicious code in project-xp78l-delta (npm)
- Aug 14, 2025
Malicious code in project-xovn9-kilo (npm)
- Aug 14, 2025
Malicious code in project-xnb3q-bravo (npm)
- Aug 14, 2025
Malicious code in project-xlm6o-juliet (npm)
- Aug 14, 2025
Malicious code in project-xhjrn-delta (npm)
- Aug 14, 2025
Malicious code in project-xg6k4-victor (npm)
- Aug 14, 2025
Malicious code in project-xc972-date (npm)
- Aug 14, 2025
Malicious code in project-xc0fz-november (npm)
- Aug 14, 2025
Malicious code in project-x9ly7-strawberry (npm)
- Aug 14, 2025
Malicious code in project-x975a-lemon (npm)
- Aug 14, 2025
Malicious code in project-x8aze-zucchini (npm)
- Aug 14, 2025
Malicious code in project-x6zki-watermelon (npm)
- Aug 14, 2025
Malicious code in project-x6han-bravo (npm)
- Aug 14, 2025
Malicious code in project-x5sd9-honeydew (npm)
- Aug 14, 2025
Malicious code in project-x4gb5-papaya (npm)
- Aug 14, 2025
Malicious code in project-x3ijy-kiwi (npm)
- Aug 14, 2025
Malicious code in project-wvfcj-lemon (npm)
- Aug 14, 2025
Malicious code in project-wtl7p-raspberry (npm)
- Aug 14, 2025
Malicious code in project-wt4nz-victor (npm)
- Aug 14, 2025
Malicious code in project-wqkpg-whiskey (npm)
- Aug 14, 2025
Malicious code in project-wplsv-grape (npm)
- Aug 14, 2025
Malicious code in project-wmnj5-bravo (npm)
- Aug 14, 2025
Malicious code in project-wklyi-mike (npm)
- Aug 14, 2025
Malicious code in project-wgyes-orange (npm)
- Aug 14, 2025
Malicious code in project-wg2g1-apple (npm)
- Aug 14, 2025
Malicious code in project-wfdg5-bravo (npm)
- Aug 14, 2025
Malicious code in project-wf2vb-cherry (npm)
- Aug 14, 2025
Malicious code in project-wezxd-lemon (npm)
- Aug 14, 2025
Malicious code in project-wbiyv-quince (npm)
- Aug 14, 2025
Malicious code in project-wb0v8-quebec (npm)
- Aug 14, 2025
Malicious code in project-wavuw-fig (npm)
- Aug 14, 2025
Malicious code in project-w9mw0-raspberry (npm)
- Aug 14, 2025
Malicious code in project-w7xpq-fig (npm)
- Aug 14, 2025
Malicious code in project-w5m02-date (npm)
- Aug 14, 2025
Malicious code in project-w5hfn-india (npm)
- Aug 14, 2025
Malicious code in project-w4ht1-zulu (npm)
- Aug 14, 2025
Malicious code in project-vy34o-quince (npm)
- Aug 14, 2025
Malicious code in project-vxqyt-november (npm)
Page 5808 of 7,293