Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-hha9q-vanilla (npm)
- Aug 14, 2025
Malicious code in project-hfndy-mango (npm)
- Aug 14, 2025
Malicious code in project-he75k-zucchini (npm)
- Aug 14, 2025
Malicious code in project-h9fpl-apple (npm)
- Aug 14, 2025
Malicious code in project-h91gh-charlie (npm)
- Aug 14, 2025
Malicious code in project-h8fel-orange (npm)
- Aug 14, 2025
Malicious code in project-h67mo-zucchini (npm)
- Aug 14, 2025
Malicious code in project-h53y1-raspberry (npm)
- Aug 14, 2025
Malicious code in project-h52kf-uniform (npm)
- Aug 14, 2025
Malicious code in project-h4xcb-mango (npm)
- Aug 14, 2025
Malicious code in project-h0pkz-zucchini (npm)
- Aug 14, 2025
Malicious code in project-h037a-apple (npm)
- Aug 14, 2025
Malicious code in project-gzfac-hotel (npm)
- Aug 14, 2025
Malicious code in project-gx8m3-nectarine (npm)
- Aug 14, 2025
Malicious code in project-gvpu1-delta (npm)
- Aug 14, 2025
Malicious code in project-gvp65-date (npm)
- Aug 14, 2025
Malicious code in project-gu173-juliet (npm)
- Aug 14, 2025
Malicious code in project-graq3-cherry (npm)
- Aug 14, 2025
Malicious code in project-gox80-sierra (npm)
- Aug 14, 2025
Malicious code in project-gom3d-zulu (npm)
- Aug 14, 2025
Malicious code in project-gnj74-papaya (npm)
- Aug 14, 2025
Malicious code in project-gn30t-uniform (npm)
- Aug 14, 2025
Malicious code in project-gn04x-victor (npm)
- Aug 14, 2025
Malicious code in project-glbh2-honeydew (npm)
- Aug 14, 2025
Malicious code in project-gjy3v-honeydew (npm)
- Aug 14, 2025
Malicious code in project-gjrm5-charlie (npm)
- Aug 14, 2025
Malicious code in project-gi6b4-raspberry (npm)
- Aug 14, 2025
Malicious code in project-gi38z-alpha (npm)
- Aug 14, 2025
Malicious code in project-ga43u-kiwi (npm)
- Aug 14, 2025
Malicious code in project-g9s8n-whiskey (npm)
- Aug 14, 2025
Malicious code in project-g91qz-sierra (npm)
- Aug 14, 2025
Malicious code in project-g8ns0-date (npm)
- Aug 14, 2025
Malicious code in project-g8hgq-zucchini (npm)
- Aug 14, 2025
Malicious code in project-g55re-fig (npm)
- Aug 14, 2025
Malicious code in project-g2rwi-vanilla (npm)
- Aug 14, 2025
Malicious code in project-fz3uh-watermelon (npm)
- Aug 14, 2025
Malicious code in project-fz1if-fig (npm)
- Aug 14, 2025
Malicious code in project-fyvpa-golf (npm)
- Aug 14, 2025
Malicious code in project-fyezf-yam (npm)
- Aug 14, 2025
Malicious code in project-fxnni-zulu (npm)
- Aug 14, 2025
Malicious code in project-fwlhu-echo (npm)
- Aug 14, 2025
Malicious code in project-fw6wb-alpha (npm)
- Aug 14, 2025
Malicious code in project-fvi48-fig (npm)
- Aug 14, 2025
Malicious code in project-fu5kt-lima (npm)
- Aug 14, 2025
Malicious code in project-ftx3f-kiwi (npm)
- Aug 14, 2025
Malicious code in project-ftimt-golf (npm)
- Aug 14, 2025
Malicious code in project-fsuyq-strawberry (npm)
- Aug 14, 2025
Malicious code in project-frjcn-elderberry (npm)
- Aug 14, 2025
Malicious code in project-fqd3c-oscar (npm)
- Aug 14, 2025
Malicious code in project-fpitf-uniform (npm)
Page 5817 of 7,293