Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-vxhnc-mike (npm)
- Aug 14, 2025
Malicious code in project-vwa1w-elderberry (npm)
- Aug 14, 2025
Malicious code in project-vw16g-honeydew (npm)
- Aug 14, 2025
Malicious code in project-vrf9f-victor (npm)
- Aug 14, 2025
Malicious code in project-vr9rn-echo (npm)
- Aug 14, 2025
Malicious code in project-vnine-alpha (npm)
- Aug 14, 2025
Malicious code in project-vl38y-papaya (npm)
- Aug 14, 2025
Malicious code in project-vjtfn-papaya (npm)
- Aug 14, 2025
Malicious code in project-vj1jl-romeo (npm)
- Aug 14, 2025
Malicious code in project-vi910-alpha (npm)
- Aug 14, 2025
Malicious code in project-vg9e9-kiwi (npm)
- Aug 14, 2025
Malicious code in project-vet57-kilo (npm)
- Aug 14, 2025
Malicious code in project-velmx-sierra (npm)
- Aug 14, 2025
Malicious code in project-vegwf-india (npm)
- Aug 14, 2025
Malicious code in project-vbpd4-date (npm)
- Aug 14, 2025
Malicious code in project-valgp-romeo (npm)
- Aug 14, 2025
Malicious code in project-v9k8z-strawberry (npm)
- Aug 14, 2025
Malicious code in project-v8dtj-ugli (npm)
- Aug 14, 2025
Malicious code in project-v7pg6-romeo (npm)
- Aug 14, 2025
Malicious code in project-v6ddf-hotel (npm)
- Aug 14, 2025
Malicious code in project-v2s9q-tango (npm)
- Aug 14, 2025
Malicious code in project-v2lli-tangerine (npm)
- Aug 14, 2025
Malicious code in project-uzpbs-charlie (npm)
- Aug 14, 2025
Malicious code in project-uyfa8-date (npm)
- Aug 14, 2025
Malicious code in project-uy5av-honeydew (npm)
- Aug 14, 2025
Malicious code in project-uwly5-whiskey (npm)
- Aug 14, 2025
Malicious code in project-uv9lm-whiskey (npm)
- Aug 14, 2025
Malicious code in project-ut3ep-mango (npm)
- Aug 14, 2025
Malicious code in project-uro46-kilo (npm)
- Aug 14, 2025
Malicious code in project-uqyuc-honeydew (npm)
- Aug 14, 2025
Malicious code in project-uq72a-elderberry (npm)
- Aug 14, 2025
Malicious code in project-uq2nl-alpha (npm)
- Aug 14, 2025
Malicious code in project-upbo9-yam (npm)
- Aug 14, 2025
Malicious code in project-up6a8-papaya (npm)
- Aug 14, 2025
Malicious code in project-uos56-kilo (npm)
- Aug 14, 2025
Malicious code in project-uore0-charlie (npm)
- Aug 14, 2025
Malicious code in project-un5i5-delta (npm)
- Aug 14, 2025
Malicious code in project-umckt-nectarine (npm)
- Aug 14, 2025
Malicious code in project-ulgt0-date (npm)
- Aug 14, 2025
Malicious code in project-ujv6p-honeydew (npm)
- Aug 14, 2025
Malicious code in project-uje83-india (npm)
- Aug 14, 2025
Malicious code in project-uij7k-quebec (npm)
- Aug 14, 2025
Malicious code in project-uhfrh-romeo (npm)
- Aug 14, 2025
Malicious code in project-ugonu-nectarine (npm)
- Aug 14, 2025
Malicious code in project-ugmj8-kiwi (npm)
- Aug 14, 2025
Malicious code in project-uglsi-raspberry (npm)
- Aug 14, 2025
Malicious code in project-udmve-ugli (npm)
- Aug 14, 2025
Malicious code in project-udm49-november (npm)
- Aug 14, 2025
Malicious code in project-ud5vw-cherry (npm)
- Aug 14, 2025
Malicious code in project-ucg3c-watermelon (npm)
Page 5809 of 7,293