Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-q7b2j-oscar (npm)
- Aug 14, 2025
Malicious code in project-q45zc-yam (npm)
- Aug 14, 2025
Malicious code in project-q3fyl-quebec (npm)
- Aug 14, 2025
Malicious code in project-pzrhc-delta (npm)
- Aug 14, 2025
Malicious code in project-pwput-quebec (npm)
- Aug 14, 2025
Malicious code in project-pvtq0-uniform (npm)
- Aug 14, 2025
Malicious code in project-psq3h-zucchini (npm)
- Aug 14, 2025
Malicious code in project-pqr6w-fig (npm)
- Aug 14, 2025
Malicious code in project-ponv3-tangerine (npm)
- Aug 14, 2025
Malicious code in project-pmix6-delta (npm)
- Aug 14, 2025
Malicious code in project-pkjtm-echo (npm)
- Aug 14, 2025
Malicious code in project-pi48q-raspberry (npm)
- Aug 14, 2025
Malicious code in project-pfa9s-golf (npm)
- Aug 14, 2025
Malicious code in project-ped9e-orange (npm)
- Aug 14, 2025
Malicious code in project-pe7k1-india (npm)
- Aug 14, 2025
Malicious code in project-pbukw-hotel (npm)
- Aug 14, 2025
Malicious code in project-pbi01-yankee (npm)
- Aug 14, 2025
Malicious code in project-pb5lg-strawberry (npm)
- Aug 14, 2025
Malicious code in project-pavpo-raspberry (npm)
- Aug 14, 2025
Malicious code in project-pab6f-charlie (npm)
- Aug 14, 2025
Malicious code in project-p5uex-apple (npm)
- Aug 14, 2025
Malicious code in project-p2uvf-delta (npm)
- Aug 14, 2025
Malicious code in project-oywf0-india (npm)
- Aug 14, 2025
Malicious code in project-oy2hi-papa (npm)
- Aug 14, 2025
Malicious code in project-oy122-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ow6xw-strawberry (npm)
- Aug 14, 2025
Malicious code in project-ovw1j-uniform (npm)
- Aug 14, 2025
Malicious code in project-ovt9r-yankee (npm)
- Aug 14, 2025
Malicious code in project-otygh-echo (npm)
- Aug 14, 2025
Malicious code in project-orht8-date (npm)
- Aug 14, 2025
Malicious code in project-orbss-mango (npm)
- Aug 14, 2025
Malicious code in project-oqmue-papaya (npm)
- Aug 14, 2025
Malicious code in project-oovdk-delta (npm)
- Aug 14, 2025
Malicious code in project-omdqc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ok17b-quince (npm)
- Aug 14, 2025
Malicious code in project-ojzxv-cherry (npm)
- Aug 14, 2025
Malicious code in project-og0x6-cherry (npm)
- Aug 14, 2025
Malicious code in project-ofj5n-hotel (npm)
- Aug 14, 2025
Malicious code in project-oe83s-golf (npm)
- Aug 14, 2025
Malicious code in project-ocupq-honeydew (npm)
- Aug 14, 2025
Malicious code in project-obrh2-alpha (npm)
- Aug 14, 2025
Malicious code in project-ob49g-mike (npm)
- Aug 14, 2025
Malicious code in project-o9m46-hotel (npm)
- Aug 14, 2025
Malicious code in project-o84vm-yam (npm)
- Aug 14, 2025
Malicious code in project-o6im6-fig (npm)
- Aug 14, 2025
Malicious code in project-o4tg7-watermelon (npm)
- Aug 14, 2025
Malicious code in project-o4hbq-apple (npm)
- Aug 14, 2025
Malicious code in project-o4fno-oscar (npm)
- Aug 14, 2025
Malicious code in project-o1s89-lemon (npm)
- Aug 14, 2025
Malicious code in project-nzevm-date (npm)
Page 5812 of 7,293