Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in prendas (npm)
- Aug 14, 2025
Malicious code in preinstall (npm)
- Aug 14, 2025
Malicious code in prefig (npm)
- Aug 14, 2025
Malicious code in preetha (npm)
- Aug 14, 2025
Malicious code in predction (npm)
- Aug 14, 2025
Malicious code in precon-execution-loop-helper (npm)
- Aug 14, 2025
Malicious code in precon-event-loop-helper (npm)
- Aug 14, 2025
Malicious code in prebind (npm)
- Aug 14, 2025
Malicious code in pre_launch_theme (npm)
- Aug 14, 2025
Malicious code in pre-commit-message-test (npm)
- Aug 14, 2025
Malicious code in prboom (npm)
- Aug 14, 2025
Malicious code in prasang (npm)
- Aug 14, 2025
Malicious code in pranked (npm)
- Aug 14, 2025
Malicious code in praktica (npm)
- Aug 14, 2025
Malicious code in prakpbo (npm)
- Aug 14, 2025
Malicious code in prairie_zla5s_v0sns_unicorn (npm)
- Aug 14, 2025
Malicious code in prairie_q7u67_ibq5t_raven (npm)
- Aug 14, 2025
Malicious code in prairie_lelmf_c5bk9_vista (npm)
- Aug 14, 2025
Malicious code in prairie_jdjve_izhuv_fern (npm)
- Aug 14, 2025
Malicious code in prairie-yucca-udg100-project (npm)
- Aug 14, 2025
Malicious code in prairie-xenon-fsd914-project (npm)
- Aug 14, 2025
Malicious code in prairie-violet-iqw360-project (npm)
- Aug 14, 2025
Malicious code in prairie-tornado-thw521-project (npm)
- Aug 14, 2025
Malicious code in prairie-tiger-yef559-project (npm)
- Aug 14, 2025
Malicious code in prairie-star-nyl323-project (npm)
- Aug 14, 2025
Malicious code in prairie-quail-sby867-project (npm)
- Aug 14, 2025
Malicious code in prairie-lilac-pjo260-project (npm)
- Aug 14, 2025
Malicious code in prairie-jade-omp992-project (npm)
- Aug 14, 2025
Malicious code in prairie-gorilla-xzt593-project (npm)
- Aug 14, 2025
Malicious code in prairie-galaxy-exm238-project (npm)
- Aug 14, 2025
Malicious code in prairie-fox-oai169-project (npm)
- Aug 14, 2025
Malicious code in prairie-bonfire-eao158-project (npm)
- Aug 14, 2025
Malicious code in prairie-amber-akt949-project (npm)
- Aug 14, 2025
Malicious code in pradnya (npm)
- Aug 14, 2025
Malicious code in practice-web-billing (npm)
- Aug 14, 2025
Malicious code in pr_projectone (npm)
- Aug 14, 2025
Malicious code in pr-lint-action (npm)
- Aug 14, 2025
Malicious code in pptwitter (npm)
- Aug 14, 2025
Malicious code in pptvtest (npm)
- Aug 14, 2025
Malicious code in ppsapp (npm)
- Aug 14, 2025
Malicious code in ppms-ui-components (npm)
- Aug 14, 2025
Malicious code in pplogger (npm)
- Aug 14, 2025
Malicious code in ppdustjs-filters-secure (npm)
- Aug 14, 2025
Malicious code in ppcryptutils (npm)
- Aug 14, 2025
Malicious code in ppboards (npm)
- Aug 14, 2025
Malicious code in ppaas (npm)
- Aug 14, 2025
Malicious code in pp-tokens (npm)
- Aug 14, 2025
Malicious code in pp-scripts (npm)
- Aug 14, 2025
Malicious code in pp-react-l10n (npm)
- Aug 14, 2025
Malicious code in pp-react (npm)
Page 5863 of 7,327