Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-dyamz-raspberry (npm)
- Aug 14, 2025
Malicious code in project-dxgwi-lemon (npm)
- Aug 14, 2025
Malicious code in project-dwf9k-hotel (npm)
- Aug 14, 2025
Malicious code in project-dv4vf-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-dv31x-quebec (npm)
- Aug 14, 2025
Malicious code in project-dure7-romeo (npm)
- Aug 14, 2025
Malicious code in project-dskxm-mike (npm)
- Aug 14, 2025
Malicious code in project-drhnl-victor (npm)
- Aug 14, 2025
Malicious code in project-dpmzc-uniform (npm)
- Aug 14, 2025
Malicious code in project-dpbmt-victor (npm)
- Aug 14, 2025
Malicious code in project-dotjm-lima (npm)
- Aug 14, 2025
Malicious code in project-dnea5-yankee (npm)
- Aug 14, 2025
Malicious code in project-dmx65-india (npm)
- Aug 14, 2025
Malicious code in project-dmpkr-alpha (npm)
- Aug 14, 2025
Malicious code in project-dhrec-tangerine (npm)
- Aug 14, 2025
Malicious code in project-dfxsm-charlie (npm)
- Aug 14, 2025
Malicious code in project-dcnvf-yam (npm)
- Aug 14, 2025
Malicious code in project-dclxa-nectarine (npm)
- Aug 14, 2025
Malicious code in project-dbpi8-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-dazfz-vanilla (npm)
- Aug 14, 2025
Malicious code in project-davoc-november (npm)
- Aug 14, 2025
Malicious code in project-d8qv3-papa (npm)
- Aug 14, 2025
Malicious code in project-d8m76-india (npm)
- Aug 14, 2025
Malicious code in project-d7j6m-hotel (npm)
- Aug 14, 2025
Malicious code in project-d5l7e-india (npm)
- Aug 14, 2025
Malicious code in project-d56rk-zucchini (npm)
- Aug 14, 2025
Malicious code in project-d3tzw-bravo (npm)
- Aug 14, 2025
Malicious code in project-d3ejt-zulu (npm)
- Aug 14, 2025
Malicious code in project-d37c3-grape (npm)
- Aug 14, 2025
Malicious code in project-d28fd-grape (npm)
- Aug 14, 2025
Malicious code in project-d1l71-date (npm)
- Aug 14, 2025
Malicious code in project-d17o2-mike (npm)
- Aug 14, 2025
Malicious code in project-cyhgq-oscar (npm)
- Aug 14, 2025
Malicious code in project-cyhg7-echo (npm)
- Aug 14, 2025
Malicious code in project-cv3mg-tango (npm)
- Aug 14, 2025
Malicious code in project-cu506-bravo (npm)
- Aug 14, 2025
Malicious code in project-csqvr-victor (npm)
- Aug 14, 2025
Malicious code in project-cpi7a-bravo (npm)
- Aug 14, 2025
Malicious code in project-cpak2-papaya (npm)
- Aug 14, 2025
Malicious code in project-cmw2e-quince (npm)
- Aug 14, 2025
Malicious code in project-cmoc0-lima (npm)
- Aug 14, 2025
Malicious code in project-cmdfc-grape (npm)
- Aug 14, 2025
Malicious code in project-cm1ly-bravo (npm)
- Aug 14, 2025
Malicious code in project-ck6sc-yam (npm)
- Aug 14, 2025
Malicious code in project-cjwwt-kiwi (npm)
- Aug 14, 2025
Malicious code in project-cjf86-papa (npm)
- Aug 14, 2025
Malicious code in project-ci2f4-fig (npm)
- Aug 14, 2025
Malicious code in project-chsfh-sierra (npm)
- Aug 14, 2025
Malicious code in project-ch7da-uniform (npm)
- Aug 14, 2025
Malicious code in project-cgz2l-oscar (npm)
Page 5819 of 7,293