Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in project-97hos-elderberry (npm)
- Aug 14, 2025
Malicious code in project-96w1d-november (npm)
- Aug 14, 2025
Malicious code in project-95tjz-mike (npm)
- Aug 14, 2025
Malicious code in project-94tdi-date (npm)
- Aug 14, 2025
Malicious code in project-94arz-yankee (npm)
- Aug 14, 2025
Malicious code in project-90xwr-zucchini (npm)
- Aug 14, 2025
Malicious code in project-90s2d-ugli (npm)
- Aug 14, 2025
Malicious code in project-8zifr-bravo (npm)
- Aug 14, 2025
Malicious code in project-8xxva-echo (npm)
- Aug 14, 2025
Malicious code in project-8s4wd-alpha (npm)
- Aug 14, 2025
Malicious code in project-8s3zn-quebec (npm)
- Aug 14, 2025
Malicious code in project-8r4tf-zucchini (npm)
- Aug 14, 2025
Malicious code in project-8pn52-grape (npm)
- Aug 14, 2025
Malicious code in project-8mqrb-strawberry (npm)
- Aug 14, 2025
Malicious code in project-8m53c-strawberry (npm)
- Aug 14, 2025
Malicious code in project-8leyn-ugli (npm)
- Aug 14, 2025
Malicious code in project-8j77s-lemon (npm)
- Aug 14, 2025
Malicious code in project-8hv94-watermelon (npm)
- Aug 14, 2025
Malicious code in project-8fboj-victor (npm)
- Aug 14, 2025
Malicious code in project-8dfrb-lima (npm)
- Aug 14, 2025
Malicious code in project-8ceo4-hotel (npm)
- Aug 14, 2025
Malicious code in project-8brsn-honeydew (npm)
- Aug 14, 2025
Malicious code in project-8bh08-honeydew (npm)
- Aug 14, 2025
Malicious code in project-8baof-uniform (npm)
- Aug 14, 2025
Malicious code in project-8b0eq-grape (npm)
- Aug 14, 2025
Malicious code in project-89caj-victor (npm)
- Aug 14, 2025
Malicious code in project-86u5s-charlie (npm)
- Aug 14, 2025
Malicious code in project-85lqf-mango (npm)
- Aug 14, 2025
Malicious code in project-82n7t-xray (npm)
- Aug 14, 2025
Malicious code in project-80lna-raspberry (npm)
- Aug 14, 2025
Malicious code in project-7yuip-delta (npm)
- Aug 14, 2025
Malicious code in project-7x1nt-kilo (npm)
- Aug 14, 2025
Malicious code in project-7wxl0-whiskey (npm)
- Aug 14, 2025
Malicious code in project-7vzjw-yankee (npm)
- Aug 14, 2025
Malicious code in project-7tg3v-cherry (npm)
- Aug 14, 2025
Malicious code in project-7sjds-india (npm)
- Aug 14, 2025
Malicious code in project-7pzz7-juliet (npm)
- Aug 14, 2025
Malicious code in project-7pgdi-quince (npm)
- Aug 14, 2025
Malicious code in project-7nyi7-yankee (npm)
- Aug 14, 2025
Malicious code in project-7n4on-yam (npm)
- Aug 14, 2025
Malicious code in project-7mgun-juliet (npm)
- Aug 14, 2025
Malicious code in project-7m73b-hotel (npm)
- Aug 14, 2025
Malicious code in project-7m2wu-quince (npm)
- Aug 14, 2025
Malicious code in project-7ks0w-zulu (npm)
- Aug 14, 2025
Malicious code in project-7itt9-elderberry (npm)
- Aug 14, 2025
Malicious code in project-7hy6x-lima (npm)
- Aug 14, 2025
Malicious code in project-7hjfs-yankee (npm)
- Aug 14, 2025
Malicious code in project-7dvtl-juliet (npm)
- Aug 14, 2025
Malicious code in project-7cb3d-kilo (npm)
- Aug 14, 2025
Malicious code in project-7br4s-cherry (npm)
Page 5822 of 7,293