Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in papa-vanilla-fig-dwijz (npm)
- Aug 14, 2025
Malicious code in papa-v4x-project (npm)
- Aug 14, 2025
Malicious code in papa-uniform-victor-kbtqa (npm)
- Aug 14, 2025
Malicious code in papa-uniform-quebec-bsnju (npm)
- Aug 14, 2025
Malicious code in papa-tangerine-ugli-ewvak (npm)
- Aug 14, 2025
Malicious code in papa-strawberry-xfep (npm)
- Aug 14, 2025
Malicious code in papa-sierra-fig-qupuq (npm)
- Aug 14, 2025
Malicious code in papa-s67-project (npm)
- Aug 14, 2025
Malicious code in papa-quince-gzbk (npm)
- Aug 14, 2025
Malicious code in papa-qjf-project (npm)
- Aug 14, 2025
Malicious code in papa-oscar-kiwi-ylomr (npm)
- Aug 14, 2025
Malicious code in papa-orange-mjdz (npm)
- Aug 14, 2025
Malicious code in papa-orange-jock (npm)
- Aug 14, 2025
Malicious code in papa-mb5-project (npm)
- Aug 14, 2025
Malicious code in papa-mango-tango-gzgum (npm)
- Aug 14, 2025
Malicious code in papa-mango-debx (npm)
- Aug 14, 2025
Malicious code in papa-lima-vpoi (npm)
- Aug 14, 2025
Malicious code in papa-lemon-rrld (npm)
- Aug 14, 2025
Malicious code in papa-kiwi-bravo-mazht (npm)
- Aug 14, 2025
Malicious code in papa-kilo-november-dejwg (npm)
- Aug 14, 2025
Malicious code in papa-iry-project (npm)
- Aug 14, 2025
Malicious code in papa-india-kilo-ifwxg (npm)
- Aug 14, 2025
Malicious code in papa-ii2-project (npm)
- Aug 14, 2025
Malicious code in papa-hyt-project (npm)
- Aug 14, 2025
Malicious code in papa-gvp-project (npm)
- Aug 14, 2025
Malicious code in papa-grape-yam-fxgue (npm)
- Aug 14, 2025
Malicious code in papa-foxtrot-zuvl (npm)
- Aug 14, 2025
Malicious code in papa-foxtrot-bswy (npm)
- Aug 14, 2025
Malicious code in papa-etz-project (npm)
- Aug 14, 2025
Malicious code in papa-elderberry-xrbn (npm)
- Aug 14, 2025
Malicious code in papa-elderberry-bkus (npm)
- Aug 14, 2025
Malicious code in papa-e8u-project (npm)
- Aug 14, 2025
Malicious code in papa-date-xray-yqtro (npm)
- Aug 14, 2025
Malicious code in papa-cherry-lima-dvfhe (npm)
- Aug 14, 2025
Malicious code in papa-charlie-whiskey-najgg (npm)
- Aug 14, 2025
Malicious code in papa-charlie-romeo-ywwsk (npm)
- Aug 14, 2025
Malicious code in papa-charlie-raspberry-lwpwy (npm)
- Aug 14, 2025
Malicious code in papa-charlie-lmtr (npm)
- Aug 14, 2025
Malicious code in papa-banana-delta-porrn (npm)
- Aug 14, 2025
Malicious code in papa-b1a-project (npm)
- Aug 14, 2025
Malicious code in papa-apple-nxtr (npm)
- Aug 14, 2025
Malicious code in papa-apple-golf-spdnr (npm)
- Aug 14, 2025
Malicious code in papa-alpha-kkei (npm)
- Aug 14, 2025
Malicious code in papa-8bg-project (npm)
- Aug 14, 2025
Malicious code in papa-5i1-project (npm)
- Aug 14, 2025
Malicious code in papa-4pn-project (npm)
- Aug 14, 2025
Malicious code in papa-4e7-project (npm)
- Aug 14, 2025
Malicious code in papa-020-project (npm)
- Aug 14, 2025
Malicious code in panymod (npm)
- Aug 14, 2025
Malicious code in pantip (npm)
Page 5846 of 7,293