Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in piano-rainbow-mxd509-project (npm)
- Aug 14, 2025
Malicious code in piano-kite-bjs795-project (npm)
- Aug 14, 2025
Malicious code in piano-kelp-yza208-project (npm)
- Aug 14, 2025
Malicious code in piano-icicle-jxp776-project (npm)
- Aug 14, 2025
Malicious code in piano-desert-uhq931-project (npm)
- Aug 14, 2025
Malicious code in piano-ant-wjc164-project (npm)
- Aug 14, 2025
Malicious code in pia-desktop-scripts (npm)
- Aug 14, 2025
Malicious code in pi-uitest (npm)
- Aug 14, 2025
Malicious code in pi-async-runtime-report-sun (npm)
- Aug 14, 2025
Malicious code in phzoom (npm)
- Aug 14, 2025
Malicious code in physed (npm)
- Aug 14, 2025
Malicious code in phylocsf (npm)
- Aug 14, 2025
Malicious code in phx.js (npm)
- Aug 14, 2025
Malicious code in phrasing (npm)
- Aug 14, 2025
Malicious code in phpwpcc (npm)
- Aug 14, 2025
Malicious code in phpwake (npm)
- Aug 14, 2025
Malicious code in phpunit (npm)
1 compromised version
- Aug 14, 2025
Malicious code in phptaller (npm)
- Aug 14, 2025
Malicious code in phpsemver (npm)
- Aug 14, 2025
Malicious code in phpsdk (npm)
- Aug 14, 2025
Malicious code in phprobot (npm)
- Aug 14, 2025
Malicious code in phppoedit (npm)
- Aug 14, 2025
Malicious code in phppass (npm)
- Aug 14, 2025
Malicious code in phpnewbie (npm)
- Aug 14, 2025
Malicious code in phplogin (npm)
- Aug 14, 2025
Malicious code in phpjs-shim (npm)
- Aug 14, 2025
Malicious code in phphaml (npm)
- Aug 14, 2025
Malicious code in phpguide (npm)
- Aug 14, 2025
Malicious code in phpenum (npm)
- Aug 14, 2025
Malicious code in phpemail (npm)
- Aug 14, 2025
Malicious code in phpcov (npm)
1 compromised version
- Aug 14, 2025
Malicious code in phpcoin (npm)
- Aug 14, 2025
Malicious code in phpbasic (npm)
- Aug 14, 2025
Malicious code in phpadd (npm)
- Aug 14, 2025
Malicious code in php-coveralls (npm)
1 compromised version
- Aug 14, 2025
Malicious code in php-code-coverage (npm)
1 compromised version
- Aug 14, 2025
Malicious code in phoyzlrdneasmkkf (npm)
- Aug 14, 2025
Malicious code in photused (npm)
- Aug 14, 2025
Malicious code in photozzim (npm)
- Aug 14, 2025
Malicious code in photoobox (npm)
- Aug 14, 2025
Malicious code in photon-virtualreality-celeste-taphonomy (npm)
- Aug 14, 2025
Malicious code in photon-lint-staged-scorpius-oortcloud (npm)
- Aug 14, 2025
Malicious code in photon-got-postcss-deneb (npm)
- Aug 14, 2025
Malicious code in photon-equinox-jovian-planetology (npm)
- Aug 14, 2025
Malicious code in photon-brane-wavefunction-cassini (npm)
- Aug 14, 2025
Malicious code in photon-astro-install-singularity (npm)
- Aug 14, 2025
Malicious code in photon-antares-markdown-pdf-chakra-ui (npm)
- Aug 14, 2025
Malicious code in photofeed (npm)
- Aug 14, 2025
Malicious code in photocat (npm)
- Aug 14, 2025
Malicious code in photoark (npm)
Page 5871 of 7,327