Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in project-1v1ho-charlie (npm)
- Aug 14, 2025
Malicious code in project-1rqtz-zucchini (npm)
- Aug 14, 2025
Malicious code in project-1rcsj-grape (npm)
- Aug 14, 2025
Malicious code in project-1qbjl-delta (npm)
- Aug 14, 2025
Malicious code in project-1ps6f-mango (npm)
- Aug 14, 2025
Malicious code in project-1ooxy-juliet (npm)
- Aug 14, 2025
Malicious code in project-1mod4-zulu (npm)
- Aug 14, 2025
Malicious code in project-1j0h6-date (npm)
- Aug 14, 2025
Malicious code in project-1im5d-india (npm)
- Aug 14, 2025
Malicious code in project-1ihis-zucchini (npm)
- Aug 14, 2025
Malicious code in project-1i1ua-lemon (npm)
- Aug 14, 2025
Malicious code in project-1h5t4-uniform (npm)
- Aug 14, 2025
Malicious code in project-1h3nh-elderberry (npm)
- Aug 14, 2025
Malicious code in project-1fatd-mango (npm)
- Aug 14, 2025
Malicious code in project-1czc0-victor (npm)
- Aug 14, 2025
Malicious code in project-1bryj-fig (npm)
- Aug 14, 2025
Malicious code in project-1atcw-honeydew (npm)
- Aug 14, 2025
Malicious code in project-1aceg-nectarine (npm)
- Aug 14, 2025
Malicious code in project-19x3g-date (npm)
- Aug 14, 2025
Malicious code in project-19nbd-india (npm)
- Aug 14, 2025
Malicious code in project-11rhz-kiwi (npm)
- Aug 14, 2025
Malicious code in project-0z48x-xigua (npm)
- Aug 14, 2025
Malicious code in project-0yueg-zulu (npm)
- Aug 14, 2025
Malicious code in project-0ypjs-orange (npm)
- Aug 14, 2025
Malicious code in project-0stfj-cherry (npm)
- Aug 14, 2025
Malicious code in project-0q6tz-quebec (npm)
- Aug 14, 2025
Malicious code in project-0n1a6-xigua (npm)
- Aug 14, 2025
Malicious code in project-0mqk9-nectarine (npm)
- Aug 14, 2025
Malicious code in project-0kdqu-papaya (npm)
- Aug 14, 2025
Malicious code in project-0ixuj-vanilla (npm)
- Aug 14, 2025
Malicious code in project-0iwg5-juliet (npm)
- Aug 14, 2025
Malicious code in project-0ip1w-quebec (npm)
- Aug 14, 2025
Malicious code in project-0ha9h-quebec (npm)
- Aug 14, 2025
Malicious code in project-0h76v-elderberry (npm)
- Aug 14, 2025
Malicious code in project-0aowd-ugli (npm)
- Aug 14, 2025
Malicious code in project-09exa-charlie (npm)
- Aug 14, 2025
Malicious code in project-06t1i-charlie (npm)
- Aug 14, 2025
Malicious code in project-06jzn-elderberry (npm)
- Aug 14, 2025
Malicious code in project-05wfh-lima (npm)
- Aug 14, 2025
Malicious code in project-034zs-whiskey (npm)
- Aug 14, 2025
Malicious code in project-02avc-golf (npm)
- Aug 14, 2025
Malicious code in project-00e6y-whiskey (npm)
- Aug 14, 2025
Malicious code in projcpp (npm)
- Aug 14, 2025
Malicious code in projavax (npm)
- Aug 14, 2025
Malicious code in progressive-web-app (npm)
- Aug 14, 2025
Malicious code in programa (npm)
- Aug 14, 2025
Malicious code in progken (npm)
- Aug 14, 2025
Malicious code in profile-reconcilliation-applet (npm)
- Aug 14, 2025
Malicious code in proficio (npm)
- Aug 14, 2025
Malicious code in proffart (npm)
Page 5860 of 7,327