Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-fn9kr-hotel (npm)
- Aug 14, 2025
Malicious code in project-fn8px-apple (npm)
- Aug 14, 2025
Malicious code in project-fjw8d-apple (npm)
- Aug 14, 2025
Malicious code in project-fjted-india (npm)
- Aug 14, 2025
Malicious code in project-fjp76-lima (npm)
- Aug 14, 2025
Malicious code in project-ficll-hotel (npm)
- Aug 14, 2025
Malicious code in project-ffz32-date (npm)
- Aug 14, 2025
Malicious code in project-ff648-uniform (npm)
- Aug 14, 2025
Malicious code in project-fez6w-orange (npm)
- Aug 14, 2025
Malicious code in project-feg6l-fig (npm)
- Aug 14, 2025
Malicious code in project-fe9l1-bravo (npm)
- Aug 14, 2025
Malicious code in project-fe4o7-strawberry (npm)
- Aug 14, 2025
Malicious code in project-fbywc-mango (npm)
- Aug 14, 2025
Malicious code in project-fazib-november (npm)
- Aug 14, 2025
Malicious code in project-fajvd-vanilla (npm)
- Aug 14, 2025
Malicious code in project-f7o5u-hotel (npm)
- Aug 14, 2025
Malicious code in project-f66cg-quebec (npm)
- Aug 14, 2025
Malicious code in project-f4zta-hotel (npm)
- Aug 14, 2025
Malicious code in project-f49sn-yam (npm)
- Aug 14, 2025
Malicious code in project-f47gg-bravo (npm)
- Aug 14, 2025
Malicious code in project-f44kj-india (npm)
- Aug 14, 2025
Malicious code in project-f3h2l-lima (npm)
- Aug 14, 2025
Malicious code in project-f2wtw-delta (npm)
- Aug 14, 2025
Malicious code in project-esd7w-watermelon (npm)
- Aug 14, 2025
Malicious code in project-ermrw-raspberry (npm)
- Aug 14, 2025
Malicious code in project-eqz84-whiskey (npm)
- Aug 14, 2025
Malicious code in project-eqw62-whiskey (npm)
- Aug 14, 2025
Malicious code in project-eqvx1-victor (npm)
- Aug 14, 2025
Malicious code in project-eo6e1-raspberry (npm)
- Aug 14, 2025
Malicious code in project-emmpp-orange (npm)
- Aug 14, 2025
Malicious code in project-eldwl-zulu (npm)
- Aug 14, 2025
Malicious code in project-ek2cu-yam (npm)
- Aug 14, 2025
Malicious code in project-ej1ts-nectarine (npm)
- Aug 14, 2025
Malicious code in project-eidsx-banana (npm)
- Aug 14, 2025
Malicious code in project-eh7vv-yankee (npm)
- Aug 14, 2025
Malicious code in project-egtvg-hotel (npm)
- Aug 14, 2025
Malicious code in project-ef071-zulu (npm)
- Aug 14, 2025
Malicious code in project-eexrr-lima (npm)
- Aug 14, 2025
Malicious code in project-ebyob-hotel (npm)
- Aug 14, 2025
Malicious code in project-e9z12-yankee (npm)
- Aug 14, 2025
Malicious code in project-e925t-hotel (npm)
- Aug 14, 2025
Malicious code in project-e8ne8-oscar (npm)
- Aug 14, 2025
Malicious code in project-e7k2c-sierra (npm)
- Aug 14, 2025
Malicious code in project-e7i0t-juliet (npm)
- Aug 14, 2025
Malicious code in project-e40es-yam (npm)
- Aug 14, 2025
Malicious code in project-e3uh2-yam (npm)
- Aug 14, 2025
Malicious code in project-e2ec6-ugli (npm)
- Aug 14, 2025
Malicious code in project-e2c4s-yam (npm)
- Aug 14, 2025
Malicious code in project-e176x-juliet (npm)
- Aug 14, 2025
Malicious code in project-e0cb4-foxtrot (npm)
Page 5818 of 7,293