Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-sde2y-cherry (npm)
- Aug 14, 2025
Malicious code in project-sd71d-zucchini (npm)
- Aug 14, 2025
Malicious code in project-sd51x-bravo (npm)
- Aug 14, 2025
Malicious code in project-sbxj0-tangerine (npm)
- Aug 14, 2025
Malicious code in project-s88ww-raspberry (npm)
- Aug 14, 2025
Malicious code in project-s4lhl-tangerine (npm)
- Aug 14, 2025
Malicious code in project-s3o3y-victor (npm)
- Aug 14, 2025
Malicious code in project-s2clk-quebec (npm)
- Aug 14, 2025
Malicious code in project-rzrsc-romeo (npm)
- Aug 14, 2025
Malicious code in project-rzmmd-orange (npm)
- Aug 14, 2025
Malicious code in project-ryys4-xray (npm)
- Aug 14, 2025
Malicious code in project-rsgfa-nectarine (npm)
- Aug 14, 2025
Malicious code in project-rrxd0-elderberry (npm)
- Aug 14, 2025
Malicious code in project-rrkb2-oscar (npm)
- Aug 14, 2025
Malicious code in project-rq5hu-vanilla (npm)
- Aug 14, 2025
Malicious code in project-rpcww-orange (npm)
- Aug 14, 2025
Malicious code in project-rogku-lima (npm)
- Aug 14, 2025
Malicious code in project-rocrr-tangerine (npm)
- Aug 14, 2025
Malicious code in project-ro5v3-fig (npm)
- Aug 14, 2025
Malicious code in project-rmmu5-tangerine (npm)
- Aug 14, 2025
Malicious code in project-rlqv2-victor (npm)
- Aug 14, 2025
Malicious code in project-rgynt-fig (npm)
- Aug 14, 2025
Malicious code in project-reoyc-zulu (npm)
- Aug 14, 2025
Malicious code in project-rdk1f-juliet (npm)
- Aug 14, 2025
Malicious code in project-rcqd1-date (npm)
- Aug 14, 2025
Malicious code in project-rcotb-november (npm)
- Aug 14, 2025
Malicious code in project-rcnzq-zucchini (npm)
- Aug 14, 2025
Malicious code in project-ravrm-victor (npm)
- Aug 14, 2025
Malicious code in project-ra6yi-november (npm)
- Aug 14, 2025
Malicious code in project-r7cyh-papa (npm)
- Aug 14, 2025
Malicious code in project-r67nd-oscar (npm)
- Aug 14, 2025
Malicious code in project-r0x8y-charlie (npm)
- Aug 14, 2025
Malicious code in project-r0q7k-strawberry (npm)
- Aug 14, 2025
Malicious code in project-r0jwm-strawberry (npm)
- Aug 14, 2025
Malicious code in project-qxs0k-zucchini (npm)
- Aug 14, 2025
Malicious code in project-qwfgm-xigua (npm)
- Aug 14, 2025
Malicious code in project-qqezv-yankee (npm)
- Aug 14, 2025
Malicious code in project-qpucj-apple (npm)
- Aug 14, 2025
Malicious code in project-qnfrm-sierra (npm)
- Aug 14, 2025
Malicious code in project-qlcap-charlie (npm)
- Aug 14, 2025
Malicious code in project-ql7fw-mike (npm)
- Aug 14, 2025
Malicious code in project-ql6hm-cherry (npm)
- Aug 14, 2025
Malicious code in project-qkhp4-date (npm)
- Aug 14, 2025
Malicious code in project-qhyil-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-qggab-date (npm)
- Aug 14, 2025
Malicious code in project-qfipx-date (npm)
- Aug 14, 2025
Malicious code in project-qcj9v-romeo (npm)
- Aug 14, 2025
Malicious code in project-q8a0c-victor (npm)
- Aug 14, 2025
Malicious code in project-q85of-tangerine (npm)
- Aug 14, 2025
Malicious code in project-q82xd-oscar (npm)
Page 5811 of 7,293