Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-ubexf-vanilla (npm)
- Aug 14, 2025
Malicious code in project-ua7k8-xigua (npm)
- Aug 14, 2025
Malicious code in project-u2u24-honeydew (npm)
- Aug 14, 2025
Malicious code in project-tzrfg-papa (npm)
- Aug 14, 2025
Malicious code in project-tw8hi-mike (npm)
- Aug 14, 2025
Malicious code in project-tw7v8-zulu (npm)
- Aug 14, 2025
Malicious code in project-tv02z-alpha (npm)
- Aug 14, 2025
Malicious code in project-tue7f-hotel (npm)
- Aug 14, 2025
Malicious code in project-tts9z-sierra (npm)
- Aug 14, 2025
Malicious code in project-tsi4z-xray (npm)
- Aug 14, 2025
Malicious code in project-tr5rb-charlie (npm)
- Aug 14, 2025
Malicious code in project-tr1q7-date (npm)
- Aug 14, 2025
Malicious code in project-tqyyn-kilo (npm)
- Aug 14, 2025
Malicious code in project-toql8-zulu (npm)
- Aug 14, 2025
Malicious code in project-tn7lw-tango (npm)
- Aug 14, 2025
Malicious code in project-tmuzr-kilo (npm)
- Aug 14, 2025
Malicious code in project-tld0i-quebec (npm)
- Aug 14, 2025
Malicious code in project-tl4ph-quebec (npm)
- Aug 14, 2025
Malicious code in project-tjdsy-yankee (npm)
- Aug 14, 2025
Malicious code in project-tislp-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ti5tl-grape (npm)
- Aug 14, 2025
Malicious code in project-tglcj-date (npm)
- Aug 14, 2025
Malicious code in project-tephm-papa (npm)
- Aug 14, 2025
Malicious code in project-te4tf-zucchini (npm)
- Aug 14, 2025
Malicious code in project-tdk3n-nectarine (npm)
- Aug 14, 2025
Malicious code in project-tby1o-ugli (npm)
- Aug 14, 2025
Malicious code in project-tbr2w-delta (npm)
- Aug 14, 2025
Malicious code in project-t21zo-yam (npm)
- Aug 14, 2025
Malicious code in project-t1tn0-fig (npm)
- Aug 14, 2025
Malicious code in project-szxca-lemon (npm)
- Aug 14, 2025
Malicious code in project-sz2xr-mango (npm)
- Aug 14, 2025
Malicious code in project-syrbs-raspberry (npm)
- Aug 14, 2025
Malicious code in project-sx2y8-quince (npm)
- Aug 14, 2025
Malicious code in project-svvl0-lima (npm)
- Aug 14, 2025
Malicious code in project-sugy1-strawberry (npm)
- Aug 14, 2025
Malicious code in project-srla9-watermelon (npm)
- Aug 14, 2025
Malicious code in project-sqqop-bravo (npm)
- Aug 14, 2025
Malicious code in project-sppn1-hotel (npm)
- Aug 14, 2025
Malicious code in project-sokph-cherry (npm)
- Aug 14, 2025
Malicious code in project-sn1pc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-sloxj-quince (npm)
- Aug 14, 2025
Malicious code in project-sl9tf-grape (npm)
- Aug 14, 2025
Malicious code in project-sj9tt-charlie (npm)
- Aug 14, 2025
Malicious code in project-simvt-kiwi (npm)
- Aug 14, 2025
Malicious code in project-sha2a-watermelon (npm)
- Aug 14, 2025
Malicious code in project-sghq7-hotel (npm)
- Aug 14, 2025
Malicious code in project-sfqqx-golf (npm)
- Aug 14, 2025
Malicious code in project-sfahy-oscar (npm)
- Aug 14, 2025
Malicious code in project-sewdu-zucchini (npm)
- Aug 14, 2025
Malicious code in project-se93i-cherry (npm)
Page 5810 of 7,293