Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,301 total · sorted newest first- Aug 14, 2025
Malicious code in project-65njs-grape (npm)
- Aug 14, 2025
Malicious code in project-62zir-november (npm)
- Aug 14, 2025
Malicious code in project-62egp-november (npm)
- Aug 14, 2025
Malicious code in project-5yuy4-uniform (npm)
- Aug 14, 2025
Malicious code in project-5yag2-kilo (npm)
- Aug 14, 2025
Malicious code in project-5x80d-quebec (npm)
- Aug 14, 2025
Malicious code in project-5wxvg-yankee (npm)
- Aug 14, 2025
Malicious code in project-5vs2l-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5umll-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5tt9b-india (npm)
- Aug 14, 2025
Malicious code in project-5sgru-papaya (npm)
- Aug 14, 2025
Malicious code in project-5sc20-romeo (npm)
- Aug 14, 2025
Malicious code in project-5rp43-lemon (npm)
- Aug 14, 2025
Malicious code in project-5r7rv-lemon (npm)
- Aug 14, 2025
Malicious code in project-5r50h-india (npm)
- Aug 14, 2025
Malicious code in project-5pxiu-xray (npm)
- Aug 14, 2025
Malicious code in project-5p6yu-charlie (npm)
- Aug 14, 2025
Malicious code in project-5oyzq-alpha (npm)
- Aug 14, 2025
Malicious code in project-5nlca-grape (npm)
- Aug 14, 2025
Malicious code in project-5msn8-victor (npm)
- Aug 14, 2025
Malicious code in project-5lswj-xray (npm)
- Aug 14, 2025
Malicious code in project-5lfb9-apple (npm)
- Aug 14, 2025
Malicious code in project-5la2z-date (npm)
- Aug 14, 2025
Malicious code in project-5hxr0-charlie (npm)
- Aug 14, 2025
Malicious code in project-5glm5-delta (npm)
- Aug 14, 2025
Malicious code in project-5d8ar-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5cg55-papaya (npm)
- Aug 14, 2025
Malicious code in project-5b55f-zulu (npm)
- Aug 14, 2025
Malicious code in project-57mx2-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-56hhd-grape (npm)
- Aug 14, 2025
Malicious code in project-54uwc-papa (npm)
- Aug 14, 2025
Malicious code in project-522ix-juliet (npm)
- Aug 14, 2025
Malicious code in project-50hjz-tangerine (npm)
- Aug 14, 2025
Malicious code in project-4uxki-strawberry (npm)
- Aug 14, 2025
Malicious code in project-4ubcm-charlie (npm)
- Aug 14, 2025
Malicious code in project-4tdxc-grape (npm)
- Aug 14, 2025
Malicious code in project-4t50e-zucchini (npm)
- Aug 14, 2025
Malicious code in project-4q8g0-delta (npm)
- Aug 14, 2025
Malicious code in project-4ouw1-quince (npm)
- Aug 14, 2025
Malicious code in project-4npek-watermelon (npm)
- Aug 14, 2025
Malicious code in project-4na4s-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-4n3g7-orange (npm)
- Aug 14, 2025
Malicious code in project-4m3k3-elderberry (npm)
- Aug 14, 2025
Malicious code in project-4kc71-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-4j1xt-quebec (npm)
- Aug 14, 2025
Malicious code in project-4iyti-yankee (npm)
- Aug 14, 2025
Malicious code in project-4i0y0-xigua (npm)
- Aug 14, 2025
Malicious code in project-4huww-kiwi (npm)
- Aug 14, 2025
Malicious code in project-4h5ip-ugli (npm)
- Aug 14, 2025
Malicious code in project-4g1gj-uniform (npm)
Page 5837 of 7,307