Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-mi5g1-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-mhcmo-elderberry (npm)
- Aug 14, 2025
Malicious code in project-mghrk-banana (npm)
- Aug 14, 2025
Malicious code in project-mdcz5-lemon (npm)
- Aug 14, 2025
Malicious code in project-mcrfe-hotel (npm)
- Aug 14, 2025
Malicious code in project-mc9ts-delta (npm)
- Aug 14, 2025
Malicious code in project-ma85i-xigua (npm)
- Aug 14, 2025
Malicious code in project-m9hzb-quince (npm)
- Aug 14, 2025
Malicious code in project-m9d4y-yam (npm)
- Aug 14, 2025
Malicious code in project-m7ghl-whiskey (npm)
- Aug 14, 2025
Malicious code in project-m6xti-banana (npm)
- Aug 14, 2025
Malicious code in project-m6g91-whiskey (npm)
- Aug 14, 2025
Malicious code in project-m48m1-november (npm)
- Aug 14, 2025
Malicious code in project-m2p8s-whiskey (npm)
- Aug 14, 2025
Malicious code in project-lzeib-vanilla (npm)
- Aug 14, 2025
Malicious code in project-lyxy7-bravo (npm)
- Aug 14, 2025
Malicious code in project-lyqta-banana (npm)
- Aug 14, 2025
Malicious code in project-lyhno-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ly5lj-tangerine (npm)
- Aug 14, 2025
Malicious code in project-lwpg7-date (npm)
- Aug 14, 2025
Malicious code in project-ltlq9-india (npm)
- Aug 14, 2025
Malicious code in project-lson5-sierra (npm)
- Aug 14, 2025
Malicious code in project-lrysr-lemon (npm)
- Aug 14, 2025
Malicious code in project-lptbx-romeo (npm)
- Aug 14, 2025
Malicious code in project-lo4m8-apple (npm)
- Aug 14, 2025
Malicious code in project-lmmnt-lima (npm)
- Aug 14, 2025
Malicious code in project-lmke9-orange (npm)
- Aug 14, 2025
Malicious code in project-llnuw-zulu (npm)
- Aug 14, 2025
Malicious code in project-lkb13-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ljsxi-romeo (npm)
- Aug 14, 2025
Malicious code in project-li3hl-lima (npm)
- Aug 14, 2025
Malicious code in project-lhady-xigua (npm)
- Aug 14, 2025
Malicious code in project-lgupa-golf (npm)
- Aug 14, 2025
Malicious code in project-lgmbj-mango (npm)
- Aug 14, 2025
Malicious code in project-lgmab-romeo (npm)
- Aug 14, 2025
Malicious code in project-lgltd-banana (npm)
- Aug 14, 2025
Malicious code in project-lgf57-uniform (npm)
- Aug 14, 2025
Malicious code in project-lfdaf-watermelon (npm)
- Aug 14, 2025
Malicious code in project-lersb-hotel (npm)
- Aug 14, 2025
Malicious code in project-ld290-tango (npm)
- Aug 14, 2025
Malicious code in project-lc8dt-lima (npm)
- Aug 14, 2025
Malicious code in project-lbihm-vanilla (npm)
- Aug 14, 2025
Malicious code in project-lbhpb-ugli (npm)
- Aug 14, 2025
Malicious code in project-lbd4a-mike (npm)
- Aug 14, 2025
Malicious code in project-la4jj-whiskey (npm)
- Aug 14, 2025
Malicious code in project-l9fo7-yam (npm)
- Aug 14, 2025
Malicious code in project-l82ki-xray (npm)
- Aug 14, 2025
Malicious code in project-l6uof-tangerine (npm)
- Aug 14, 2025
Malicious code in project-l4wh2-vanilla (npm)
- Aug 14, 2025
Malicious code in project-l3f5v-grape (npm)
Page 5814 of 7,293