Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in ping-reductions (npm)
- Aug 14, 2025
Malicious code in ping-api-ruby (npm)
- Aug 14, 2025
Malicious code in pinelopi (npm)
- Aug 14, 2025
Malicious code in pine_llv8i_w9u3s_sapphire (npm)
- Aug 14, 2025
Malicious code in pine_ivizu_uj01g_plume (npm)
- Aug 14, 2025
Malicious code in pine-zenith-zglc (npm)
- Aug 14, 2025
Malicious code in pine-yearling-dx4s (npm)
- Aug 14, 2025
Malicious code in pine-wormhole-v6m0 (npm)
- Aug 14, 2025
Malicious code in pine-quarry-w81j (npm)
- Aug 14, 2025
Malicious code in pine-nutmeg-gy0t (npm)
- Aug 14, 2025
Malicious code in pindare (npm)
- Aug 14, 2025
Malicious code in pimule (npm)
- Aug 14, 2025
Malicious code in pika (npm)
- Aug 14, 2025
Malicious code in pijecta (npm)
- Aug 14, 2025
Malicious code in pii-detector (npm)
- Aug 14, 2025
Malicious code in pigyacc (npm)
- Aug 14, 2025
Malicious code in pigreko (npm)
- Aug 14, 2025
Malicious code in pietros (npm)
- Aug 14, 2025
Malicious code in pier-yam-dr1v (npm)
- Aug 14, 2025
Malicious code in pier-void-qlti (npm)
- Aug 14, 2025
Malicious code in pier-umbrella-cexq (npm)
- Aug 14, 2025
Malicious code in pier-penguin-92vz (npm)
- Aug 14, 2025
Malicious code in pier-mushroom-4z39 (npm)
- Aug 14, 2025
Malicious code in pier-kapok-4zwg (npm)
- Aug 14, 2025
Malicious code in pier-igloo-b0vd (npm)
- Aug 14, 2025
Malicious code in pier-ginger-i3aa (npm)
- Aug 14, 2025
Malicious code in pier-banana-w5yk (npm)
- Aug 14, 2025
Malicious code in piemenu (npm)
- Aug 14, 2025
Malicious code in pidtuning (npm)
- Aug 14, 2025
Malicious code in pideya (npm)
- Aug 14, 2025
Malicious code in pictio (npm)
- Aug 14, 2025
Malicious code in picpass (npm)
- Aug 14, 2025
Malicious code in piclog (npm)
- Aug 14, 2025
Malicious code in piclip (npm)
- Aug 14, 2025
Malicious code in pickosite (npm)
- Aug 14, 2025
Malicious code in pickmeo-test1 (npm)
- Aug 14, 2025
Malicious code in pickmeo-test-module (npm)
- Aug 14, 2025
Malicious code in pick-value (npm)
- Aug 14, 2025
Malicious code in pick-some-values (npm)
- Aug 14, 2025
Malicious code in pick-some-keys (npm)
- Aug 14, 2025
Malicious code in pick-redvelvet-member (npm)
- Aug 14, 2025
Malicious code in picform (npm)
- Aug 14, 2025
Malicious code in picfix (npm)
- Aug 14, 2025
Malicious code in picchat (npm)
- Aug 14, 2025
Malicious code in picamleed (npm)
- Aug 14, 2025
Malicious code in piasma (npm)
- Aug 14, 2025
Malicious code in piano-zenith-jbl409-project (npm)
- Aug 14, 2025
Malicious code in piano-yellow-lqa838-project (npm)
- Aug 14, 2025
Malicious code in piano-whirlpool-wid643-project (npm)
- Aug 14, 2025
Malicious code in piano-thistle-cnk812-project (npm)
Page 5870 of 7,327