Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in project-3npxw-tango (npm)
- Aug 14, 2025
Malicious code in project-3mwm9-tango (npm)
- Aug 14, 2025
Malicious code in project-3l2as-echo (npm)
- Aug 14, 2025
Malicious code in project-3kzl3-juliet (npm)
- Aug 14, 2025
Malicious code in project-3ilck-lemon (npm)
- Aug 14, 2025
Malicious code in project-3ee1o-watermelon (npm)
- Aug 14, 2025
Malicious code in project-3agi5-bravo (npm)
- Aug 14, 2025
Malicious code in project-39hf4-whiskey (npm)
- Aug 14, 2025
Malicious code in project-38yw3-mike (npm)
- Aug 14, 2025
Malicious code in project-38woq-yankee (npm)
- Aug 14, 2025
Malicious code in project-38mku-echo (npm)
- Aug 14, 2025
Malicious code in project-38awj-juliet (npm)
- Aug 14, 2025
Malicious code in project-387at-bravo (npm)
- Aug 14, 2025
Malicious code in project-37ejp-tangerine (npm)
- Aug 14, 2025
Malicious code in project-35ot3-mike (npm)
- Aug 14, 2025
Malicious code in project-34npr-romeo (npm)
- Aug 14, 2025
Malicious code in project-2zzbo-quince (npm)
- Aug 14, 2025
Malicious code in project-2zfpb-quebec (npm)
- Aug 14, 2025
Malicious code in project-2ycek-orange (npm)
- Aug 14, 2025
Malicious code in project-2s3gs-vanilla (npm)
- Aug 14, 2025
Malicious code in project-2rja4-echo (npm)
- Aug 14, 2025
Malicious code in project-2rbe0-kiwi (npm)
- Aug 14, 2025
Malicious code in project-2r3tf-strawberry (npm)
- Aug 14, 2025
Malicious code in project-2r0bk-india (npm)
- Aug 14, 2025
Malicious code in project-2qygm-lemon (npm)
- Aug 14, 2025
Malicious code in project-2ol8v-vanilla (npm)
- Aug 14, 2025
Malicious code in project-2modo-fig (npm)
- Aug 14, 2025
Malicious code in project-2kuhw-juliet (npm)
- Aug 14, 2025
Malicious code in project-2izp5-apple (npm)
- Aug 14, 2025
Malicious code in project-2fpur-fig (npm)
- Aug 14, 2025
Malicious code in project-2fifk-kiwi (npm)
- Aug 14, 2025
Malicious code in project-2fanj-delta (npm)
- Aug 14, 2025
Malicious code in project-2e2c3-cherry (npm)
- Aug 14, 2025
Malicious code in project-2czi3-mango (npm)
- Aug 14, 2025
Malicious code in project-2aq26-bravo (npm)
- Aug 14, 2025
Malicious code in project-2a1hg-echo (npm)
- Aug 14, 2025
Malicious code in project-29clo-zucchini (npm)
- Aug 14, 2025
Malicious code in project-27w8x-india (npm)
- Aug 14, 2025
Malicious code in project-26v5h-uniform (npm)
- Aug 14, 2025
Malicious code in project-25v7a-uniform (npm)
- Aug 14, 2025
Malicious code in project-25pjr-mike (npm)
- Aug 14, 2025
Malicious code in project-24kl1-romeo (npm)
- Aug 14, 2025
Malicious code in project-22m3w-xigua (npm)
- Aug 14, 2025
Malicious code in project-20n3m-tango (npm)
- Aug 14, 2025
Malicious code in project-1zz1k-oscar (npm)
- Aug 14, 2025
Malicious code in project-1yxy0-vanilla (npm)
- Aug 14, 2025
Malicious code in project-1y4pf-honeydew (npm)
- Aug 14, 2025
Malicious code in project-1xjaf-bravo (npm)
- Aug 14, 2025
Malicious code in project-1wjmb-lemon (npm)
- Aug 14, 2025
Malicious code in project-1w4dp-yam (npm)
Page 5859 of 7,327