Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,458 total · sorted newest first- Aug 14, 2025
Malicious code in project-dazfz-vanilla (npm)
- Aug 14, 2025
Malicious code in project-davoc-november (npm)
- Aug 14, 2025
Malicious code in project-d8qv3-papa (npm)
- Aug 14, 2025
Malicious code in project-d8m76-india (npm)
- Aug 14, 2025
Malicious code in project-d7j6m-hotel (npm)
- Aug 14, 2025
Malicious code in project-d5l7e-india (npm)
- Aug 14, 2025
Malicious code in project-d56rk-zucchini (npm)
- Aug 14, 2025
Malicious code in project-d3tzw-bravo (npm)
- Aug 14, 2025
Malicious code in project-d3ejt-zulu (npm)
- Aug 14, 2025
Malicious code in project-d37c3-grape (npm)
- Aug 14, 2025
Malicious code in project-d28fd-grape (npm)
- Aug 14, 2025
Malicious code in project-d1l71-date (npm)
- Aug 14, 2025
Malicious code in project-d17o2-mike (npm)
- Aug 14, 2025
Malicious code in project-cyhgq-oscar (npm)
- Aug 14, 2025
Malicious code in project-cyhg7-echo (npm)
- Aug 14, 2025
Malicious code in project-cv3mg-tango (npm)
- Aug 14, 2025
Malicious code in project-cu506-bravo (npm)
- Aug 14, 2025
Malicious code in project-csqvr-victor (npm)
- Aug 14, 2025
Malicious code in project-cpi7a-bravo (npm)
- Aug 14, 2025
Malicious code in project-cpak2-papaya (npm)
- Aug 14, 2025
Malicious code in project-cmw2e-quince (npm)
- Aug 14, 2025
Malicious code in project-cmoc0-lima (npm)
- Aug 14, 2025
Malicious code in project-cmdfc-grape (npm)
- Aug 14, 2025
Malicious code in project-cm1ly-bravo (npm)
- Aug 14, 2025
Malicious code in project-ck6sc-yam (npm)
- Aug 14, 2025
Malicious code in project-cjwwt-kiwi (npm)
- Aug 14, 2025
Malicious code in project-cjf86-papa (npm)
- Aug 14, 2025
Malicious code in project-ci2f4-fig (npm)
- Aug 14, 2025
Malicious code in project-chsfh-sierra (npm)
- Aug 14, 2025
Malicious code in project-ch7da-uniform (npm)
- Aug 14, 2025
Malicious code in project-cgz2l-oscar (npm)
- Aug 14, 2025
Malicious code in project-cgs9j-delta (npm)
- Aug 14, 2025
Malicious code in project-cgdpo-uniform (npm)
- Aug 14, 2025
Malicious code in project-cg4kc-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-ceo51-papaya (npm)
- Aug 14, 2025
Malicious code in project-ce5ak-cherry (npm)
- Aug 14, 2025
Malicious code in project-ce4hc-tangerine (npm)
- Aug 14, 2025
Malicious code in project-cdkcd-yam (npm)
- Aug 14, 2025
Malicious code in project-cc1yq-mike (npm)
- Aug 14, 2025
Malicious code in project-ca5tp-elderberry (npm)
- Aug 14, 2025
Malicious code in project-c9eaj-papa (npm)
- Aug 14, 2025
Malicious code in project-c89uq-lemon (npm)
- Aug 14, 2025
Malicious code in project-c81n0-apple (npm)
- Aug 14, 2025
Malicious code in project-c6ntc-raspberry (npm)
- Aug 14, 2025
Malicious code in project-c6g3g-vanilla (npm)
- Aug 14, 2025
Malicious code in project-c6d0i-banana (npm)
- Aug 14, 2025
Malicious code in project-c5qtq-tango (npm)
- Aug 14, 2025
Malicious code in project-c3ful-lemon (npm)
- Aug 14, 2025
Malicious code in project-c0upq-ugli (npm)
- Aug 14, 2025
Malicious code in project-bzv6s-romeo (npm)
Page 5836 of 7,310