Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in project-7hjfs-yankee (npm)
- Aug 14, 2025
Malicious code in project-7dvtl-juliet (npm)
- Aug 14, 2025
Malicious code in project-7cb3d-kilo (npm)
- Aug 14, 2025
Malicious code in project-7br4s-cherry (npm)
- Aug 14, 2025
Malicious code in project-7bjwx-mango (npm)
- Aug 14, 2025
Malicious code in project-77xwl-romeo (npm)
- Aug 14, 2025
Malicious code in project-77hfn-lima (npm)
- Aug 14, 2025
Malicious code in project-76rc9-lima (npm)
- Aug 14, 2025
Malicious code in project-75c3h-november (npm)
- Aug 14, 2025
Malicious code in project-6y1f0-yankee (npm)
- Aug 14, 2025
Malicious code in project-6wow2-juliet (npm)
- Aug 14, 2025
Malicious code in project-6u1dw-yam (npm)
- Aug 14, 2025
Malicious code in project-6tgw5-golf (npm)
- Aug 14, 2025
Malicious code in project-6p07z-lemon (npm)
- Aug 14, 2025
Malicious code in project-6nnf9-xray (npm)
- Aug 14, 2025
Malicious code in project-6nht4-zucchini (npm)
- Aug 14, 2025
Malicious code in project-6kuw6-uniform (npm)
- Aug 14, 2025
Malicious code in project-6ko67-mike (npm)
- Aug 14, 2025
Malicious code in project-6ixuy-lima (npm)
- Aug 14, 2025
Malicious code in project-6ftyt-hotel (npm)
- Aug 14, 2025
Malicious code in project-6ez1m-papaya (npm)
- Aug 14, 2025
Malicious code in project-6esgy-date (npm)
- Aug 14, 2025
Malicious code in project-6dx1u-delta (npm)
- Aug 14, 2025
Malicious code in project-6db0g-india (npm)
- Aug 14, 2025
Malicious code in project-6bpu3-watermelon (npm)
- Aug 14, 2025
Malicious code in project-6aeoa-honeydew (npm)
- Aug 14, 2025
Malicious code in project-69fqw-lemon (npm)
- Aug 14, 2025
Malicious code in project-697su-tangerine (npm)
- Aug 14, 2025
Malicious code in project-67l1j-grape (npm)
- Aug 14, 2025
Malicious code in project-66p7v-raspberry (npm)
- Aug 14, 2025
Malicious code in project-65njs-grape (npm)
- Aug 14, 2025
Malicious code in project-62zir-november (npm)
- Aug 14, 2025
Malicious code in project-62egp-november (npm)
- Aug 14, 2025
Malicious code in project-5yuy4-uniform (npm)
- Aug 14, 2025
Malicious code in project-5yag2-kilo (npm)
- Aug 14, 2025
Malicious code in project-5x80d-quebec (npm)
- Aug 14, 2025
Malicious code in project-5wxvg-yankee (npm)
- Aug 14, 2025
Malicious code in project-5vs2l-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5umll-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5tt9b-india (npm)
- Aug 14, 2025
Malicious code in project-5sgru-papaya (npm)
- Aug 14, 2025
Malicious code in project-5sc20-romeo (npm)
- Aug 14, 2025
Malicious code in project-5rp43-lemon (npm)
- Aug 14, 2025
Malicious code in project-5r7rv-lemon (npm)
- Aug 14, 2025
Malicious code in project-5r50h-india (npm)
- Aug 14, 2025
Malicious code in project-5pxiu-xray (npm)
- Aug 14, 2025
Malicious code in project-5p6yu-charlie (npm)
- Aug 14, 2025
Malicious code in project-5oyzq-alpha (npm)
- Aug 14, 2025
Malicious code in project-5nlca-grape (npm)
- Aug 14, 2025
Malicious code in project-5msn8-victor (npm)
Page 5857 of 7,327