Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-cgs9j-delta (npm)
- Aug 14, 2025
Malicious code in project-cgdpo-uniform (npm)
- Aug 14, 2025
Malicious code in project-cg4kc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ceo51-papaya (npm)
- Aug 14, 2025
Malicious code in project-ce5ak-cherry (npm)
- Aug 14, 2025
Malicious code in project-ce4hc-tangerine (npm)
- Aug 14, 2025
Malicious code in project-cdkcd-yam (npm)
- Aug 14, 2025
Malicious code in project-cc1yq-mike (npm)
- Aug 14, 2025
Malicious code in project-ca5tp-elderberry (npm)
- Aug 14, 2025
Malicious code in project-c9eaj-papa (npm)
- Aug 14, 2025
Malicious code in project-c89uq-lemon (npm)
- Aug 14, 2025
Malicious code in project-c81n0-apple (npm)
- Aug 14, 2025
Malicious code in project-c6ntc-raspberry (npm)
- Aug 14, 2025
Malicious code in project-c6g3g-vanilla (npm)
- Aug 14, 2025
Malicious code in project-c6d0i-banana (npm)
- Aug 14, 2025
Malicious code in project-c5qtq-tango (npm)
- Aug 14, 2025
Malicious code in project-c3ful-lemon (npm)
- Aug 14, 2025
Malicious code in project-c0upq-ugli (npm)
- Aug 14, 2025
Malicious code in project-bzv6s-romeo (npm)
- Aug 14, 2025
Malicious code in project-bwwob-strawberry (npm)
- Aug 14, 2025
Malicious code in project-bvczs-yankee (npm)
- Aug 14, 2025
Malicious code in project-buyzi-mango (npm)
- Aug 14, 2025
Malicious code in project-busli-delta (npm)
- Aug 14, 2025
Malicious code in project-bun0r-tango (npm)
- Aug 14, 2025
Malicious code in project-bs70f-grape (npm)
- Aug 14, 2025
Malicious code in project-brtsu-victor (npm)
- Aug 14, 2025
Malicious code in project-brh0c-raspberry (npm)
- Aug 14, 2025
Malicious code in project-bpxn5-victor (npm)
- Aug 14, 2025
Malicious code in project-bpbgu-honeydew (npm)
- Aug 14, 2025
Malicious code in project-bnidl-zucchini (npm)
- Aug 14, 2025
Malicious code in project-bmxk7-uniform (npm)
- Aug 14, 2025
Malicious code in project-bk1h5-india (npm)
- Aug 14, 2025
Malicious code in project-bi8ih-tango (npm)
- Aug 14, 2025
Malicious code in project-bhzgw-sierra (npm)
- Aug 14, 2025
Malicious code in project-bhozd-delta (npm)
- Aug 14, 2025
Malicious code in project-bgd9k-raspberry (npm)
- Aug 14, 2025
Malicious code in project-bfgbm-apple (npm)
- Aug 14, 2025
Malicious code in project-bex7c-november (npm)
- Aug 14, 2025
Malicious code in project-b9bvv-charlie (npm)
- Aug 14, 2025
Malicious code in project-b6qgt-zulu (npm)
- Aug 14, 2025
Malicious code in project-b5a84-grape (npm)
- Aug 14, 2025
Malicious code in project-b45cw-raspberry (npm)
- Aug 14, 2025
Malicious code in project-b1by8-cherry (npm)
- Aug 14, 2025
Malicious code in project-azu1g-uniform (npm)
- Aug 14, 2025
Malicious code in project-axj0z-charlie (npm)
- Aug 14, 2025
Malicious code in project-axcmf-november (npm)
- Aug 14, 2025
Malicious code in project-asexh-golf (npm)
- Aug 14, 2025
Malicious code in project-apurw-kilo (npm)
- Aug 14, 2025
Malicious code in project-apcca-november (npm)
- Aug 14, 2025
Malicious code in project-ap2wo-kiwi (npm)
Page 5820 of 7,293