Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,461 total · sorted newest first- Aug 14, 2025
Malicious code in project-aal5j-date (npm)
- Aug 14, 2025
Malicious code in project-a8yce-papa (npm)
- Aug 14, 2025
Malicious code in project-a8h9w-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-a7wnh-alpha (npm)
- Aug 14, 2025
Malicious code in project-a77jq-quince (npm)
- Aug 14, 2025
Malicious code in project-a61n1-date (npm)
- Aug 14, 2025
Malicious code in project-a5a86-apple (npm)
- Aug 14, 2025
Malicious code in project-a2s4j-papaya (npm)
- Aug 14, 2025
Malicious code in project-a2fth-echo (npm)
- Aug 14, 2025
Malicious code in project-a0asy-lima (npm)
- Aug 14, 2025
Malicious code in project-9ygeg-tangerine (npm)
- Aug 14, 2025
Malicious code in project-9y1ch-date (npm)
- Aug 14, 2025
Malicious code in project-9xjp8-sierra (npm)
- Aug 14, 2025
Malicious code in project-9wh7e-vanilla (npm)
- Aug 14, 2025
Malicious code in project-9wetz-cherry (npm)
- Aug 14, 2025
Malicious code in project-9un1o-delta (npm)
- Aug 14, 2025
Malicious code in project-9tzir-vanilla (npm)
- Aug 14, 2025
Malicious code in project-9tc2g-charlie (npm)
- Aug 14, 2025
Malicious code in project-9tawf-mike (npm)
- Aug 14, 2025
Malicious code in project-9rgkj-delta (npm)
- Aug 14, 2025
Malicious code in project-9pwqg-orange (npm)
- Aug 14, 2025
Malicious code in project-9pw5k-xray (npm)
- Aug 14, 2025
Malicious code in project-9of0j-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-9l97d-elderberry (npm)
- Aug 14, 2025
Malicious code in project-9kjsn-mango (npm)
- Aug 14, 2025
Malicious code in project-9jkqr-tango (npm)
- Aug 14, 2025
Malicious code in project-9igf5-oscar (npm)
- Aug 14, 2025
Malicious code in project-9giof-lemon (npm)
- Aug 14, 2025
Malicious code in project-9etga-mango (npm)
- Aug 14, 2025
Malicious code in project-9cpwr-november (npm)
- Aug 14, 2025
Malicious code in project-999yx-vanilla (npm)
- Aug 14, 2025
Malicious code in project-994kh-yankee (npm)
- Aug 14, 2025
Malicious code in project-98kuw-oscar (npm)
- Aug 14, 2025
Malicious code in project-97y2d-sierra (npm)
- Aug 14, 2025
Malicious code in project-97hos-elderberry (npm)
- Aug 14, 2025
Malicious code in project-96w1d-november (npm)
- Aug 14, 2025
Malicious code in project-95tjz-mike (npm)
- Aug 14, 2025
Malicious code in project-94tdi-date (npm)
- Aug 14, 2025
Malicious code in project-94arz-yankee (npm)
- Aug 14, 2025
Malicious code in project-90xwr-zucchini (npm)
- Aug 14, 2025
Malicious code in project-90s2d-ugli (npm)
- Aug 14, 2025
Malicious code in project-8zifr-bravo (npm)
- Aug 14, 2025
Malicious code in project-8xxva-echo (npm)
- Aug 14, 2025
Malicious code in project-8s4wd-alpha (npm)
- Aug 14, 2025
Malicious code in project-8s3zn-quebec (npm)
- Aug 14, 2025
Malicious code in project-8r4tf-zucchini (npm)
- Aug 14, 2025
Malicious code in project-8pn52-grape (npm)
- Aug 14, 2025
Malicious code in project-8mqrb-strawberry (npm)
- Aug 14, 2025
Malicious code in project-8m53c-strawberry (npm)
- Aug 14, 2025
Malicious code in project-8leyn-ugli (npm)
Page 5838 of 7,310