Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in project-5lswj-xray (npm)
- Aug 14, 2025
Malicious code in project-5lfb9-apple (npm)
- Aug 14, 2025
Malicious code in project-5la2z-date (npm)
- Aug 14, 2025
Malicious code in project-5hxr0-charlie (npm)
- Aug 14, 2025
Malicious code in project-5glm5-delta (npm)
- Aug 14, 2025
Malicious code in project-5d8ar-watermelon (npm)
- Aug 14, 2025
Malicious code in project-5cg55-papaya (npm)
- Aug 14, 2025
Malicious code in project-5b55f-zulu (npm)
- Aug 14, 2025
Malicious code in project-57mx2-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-56hhd-grape (npm)
- Aug 14, 2025
Malicious code in project-54uwc-papa (npm)
- Aug 14, 2025
Malicious code in project-522ix-juliet (npm)
- Aug 14, 2025
Malicious code in project-50hjz-tangerine (npm)
- Aug 14, 2025
Malicious code in project-4uxki-strawberry (npm)
- Aug 14, 2025
Malicious code in project-4ubcm-charlie (npm)
- Aug 14, 2025
Malicious code in project-4tdxc-grape (npm)
- Aug 14, 2025
Malicious code in project-4t50e-zucchini (npm)
- Aug 14, 2025
Malicious code in project-4q8g0-delta (npm)
- Aug 14, 2025
Malicious code in project-4ouw1-quince (npm)
- Aug 14, 2025
Malicious code in project-4npek-watermelon (npm)
- Aug 14, 2025
Malicious code in project-4na4s-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-4n3g7-orange (npm)
- Aug 14, 2025
Malicious code in project-4m3k3-elderberry (npm)
- Aug 14, 2025
Malicious code in project-4kc71-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-4j1xt-quebec (npm)
- Aug 14, 2025
Malicious code in project-4iyti-yankee (npm)
- Aug 14, 2025
Malicious code in project-4i0y0-xigua (npm)
- Aug 14, 2025
Malicious code in project-4huww-kiwi (npm)
- Aug 14, 2025
Malicious code in project-4h5ip-ugli (npm)
- Aug 14, 2025
Malicious code in project-4g1gj-uniform (npm)
- Aug 14, 2025
Malicious code in project-4excq-india (npm)
- Aug 14, 2025
Malicious code in project-4cqey-date (npm)
- Aug 14, 2025
Malicious code in project-4cmo9-papa (npm)
- Aug 14, 2025
Malicious code in project-4b3cm-zucchini (npm)
- Aug 14, 2025
Malicious code in project-49xb3-ugli (npm)
- Aug 14, 2025
Malicious code in project-47vx0-nectarine (npm)
- Aug 14, 2025
Malicious code in project-45a0a-kiwi (npm)
- Aug 14, 2025
Malicious code in project-42ahw-sierra (npm)
- Aug 14, 2025
Malicious code in project-41pqi-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-3zep0-vanilla (npm)
- Aug 14, 2025
Malicious code in project-3y0e6-foxtrot (npm)
- Aug 14, 2025
Malicious code in project-3xg2z-zucchini (npm)
- Aug 14, 2025
Malicious code in project-3vee9-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3umgz-victor (npm)
- Aug 14, 2025
Malicious code in project-3tlw2-raspberry (npm)
- Aug 14, 2025
Malicious code in project-3s5ei-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3roa3-oscar (npm)
- Aug 14, 2025
Malicious code in project-3q6x4-oscar (npm)
- Aug 14, 2025
Malicious code in project-3phhd-quince (npm)
- Aug 14, 2025
Malicious code in project-3o5x5-romeo (npm)
Page 5858 of 7,327