Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-nza9r-raspberry (npm)
- Aug 14, 2025
Malicious code in project-ny9gt-quince (npm)
- Aug 14, 2025
Malicious code in project-nxsf4-quince (npm)
- Aug 14, 2025
Malicious code in project-nxkg9-fig (npm)
- Aug 14, 2025
Malicious code in project-nxi8b-yankee (npm)
- Aug 14, 2025
Malicious code in project-nx6ew-bravo (npm)
- Aug 14, 2025
Malicious code in project-nv40w-cherry (npm)
- Aug 14, 2025
Malicious code in project-nug91-raspberry (npm)
- Aug 14, 2025
Malicious code in project-nrp5u-strawberry (npm)
- Aug 14, 2025
Malicious code in project-nriak-yankee (npm)
- Aug 14, 2025
Malicious code in project-nqxce-india (npm)
- Aug 14, 2025
Malicious code in project-nqkde-date (npm)
- Aug 14, 2025
Malicious code in project-nqf04-juliet (npm)
- Aug 14, 2025
Malicious code in project-npxzz-echo (npm)
- Aug 14, 2025
Malicious code in project-npd6r-golf (npm)
- Aug 14, 2025
Malicious code in project-nmy6l-apple (npm)
- Aug 14, 2025
Malicious code in project-nlzao-papaya (npm)
- Aug 14, 2025
Malicious code in project-njuic-mike (npm)
- Aug 14, 2025
Malicious code in project-nj17h-vanilla (npm)
- Aug 14, 2025
Malicious code in project-nh43a-charlie (npm)
- Aug 14, 2025
Malicious code in project-ngzuz-sierra (npm)
- Aug 14, 2025
Malicious code in project-ng6-lib-app (npm)
- Aug 14, 2025
Malicious code in project-nfcqb-zulu (npm)
- Aug 14, 2025
Malicious code in project-nal2f-bravo (npm)
- Aug 14, 2025
Malicious code in project-n9ijt-sierra (npm)
- Aug 14, 2025
Malicious code in project-n8wrd-charlie (npm)
- Aug 14, 2025
Malicious code in project-n7ckz-ugli (npm)
- Aug 14, 2025
Malicious code in project-n6ruc-whiskey (npm)
- Aug 14, 2025
Malicious code in project-n43n1-uniform (npm)
- Aug 14, 2025
Malicious code in project-n3yy6-papaya (npm)
- Aug 14, 2025
Malicious code in project-n3qvc-victor (npm)
- Aug 14, 2025
Malicious code in project-n1ihq-grape (npm)
- Aug 14, 2025
Malicious code in project-n0rer-orange (npm)
- Aug 14, 2025
Malicious code in project-mzwht-echo (npm)
- Aug 14, 2025
Malicious code in project-mzp8i-watermelon (npm)
- Aug 14, 2025
Malicious code in project-mzkac-lemon (npm)
- Aug 14, 2025
Malicious code in project-mwxlu-ugli (npm)
- Aug 14, 2025
Malicious code in project-mwq3d-ugli (npm)
- Aug 14, 2025
Malicious code in project-mwi5v-mike (npm)
- Aug 14, 2025
Malicious code in project-mrwbh-oscar (npm)
- Aug 14, 2025
Malicious code in project-mrnbi-tangerine (npm)
- Aug 14, 2025
Malicious code in project-mqjbp-vanilla (npm)
- Aug 14, 2025
Malicious code in project-mqex1-zucchini (npm)
- Aug 14, 2025
Malicious code in project-mppvv-fig (npm)
- Aug 14, 2025
Malicious code in project-mpk53-uniform (npm)
- Aug 14, 2025
Malicious code in project-mlmek-elderberry (npm)
- Aug 14, 2025
Malicious code in project-mkw09-yankee (npm)
- Aug 14, 2025
Malicious code in project-mknxk-raspberry (npm)
- Aug 14, 2025
Malicious code in project-mj6hl-xray (npm)
- Aug 14, 2025
Malicious code in project-mj3va-ugli (npm)
Page 5813 of 7,293