Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in performance-parts (npm)
- Aug 14, 2025
Malicious code in perdodere (npm)
- Aug 14, 2025
Malicious code in percripts (npm)
- Aug 14, 2025
Malicious code in perales (npm)
- Aug 14, 2025
Malicious code in pepcha (npm)
- Aug 14, 2025
Malicious code in peoplejs (npm)
- Aug 14, 2025
Malicious code in people-also-watched111 (npm)
- Aug 14, 2025
Malicious code in peony-yucca-mrk579-project (npm)
- Aug 14, 2025
Malicious code in peony-undertow-ugg597-project (npm)
- Aug 14, 2025
Malicious code in peony-undertow-owh513-project (npm)
- Aug 14, 2025
Malicious code in peony-topaz-ucc076-project (npm)
- Aug 14, 2025
Malicious code in peony-swan-nde966-project (npm)
- Aug 14, 2025
Malicious code in peony-ripple-fll511-project (npm)
- Aug 14, 2025
Malicious code in peony-quagmire-bhi135-project (npm)
- Aug 14, 2025
Malicious code in peony-pebble-jbu062-project (npm)
- Aug 14, 2025
Malicious code in peony-nectar-hml556-project (npm)
- Aug 14, 2025
Malicious code in peony-moose-gow694-project (npm)
- Aug 14, 2025
Malicious code in peony-kiwi-kym426-project (npm)
- Aug 14, 2025
Malicious code in peony-jade-hjf510-project (npm)
- Aug 14, 2025
Malicious code in peony-icicle-uie749-project (npm)
- Aug 14, 2025
Malicious code in peony-fern-ejt221-project (npm)
- Aug 14, 2025
Malicious code in peony-dove-vwr736-project (npm)
- Aug 14, 2025
Malicious code in peony-ant-vcq630-project (npm)
- Aug 14, 2025
Malicious code in peony-ant-jzt607-project (npm)
- Aug 14, 2025
Malicious code in peoject (npm)
- Aug 14, 2025
Malicious code in penteract.js (npm)
- Aug 14, 2025
Malicious code in pentakle (npm)
- Aug 14, 2025
Malicious code in pentahobi (npm)
- Aug 14, 2025
Malicious code in pensievr (npm)
- Aug 14, 2025
Malicious code in penneo-application-loader (npm)
- Aug 14, 2025
Malicious code in penguin-xanadu-fmn783-project (npm)
- Aug 14, 2025
Malicious code in penguin-uranium-dkr184-project (npm)
- Aug 14, 2025
Malicious code in penguin-tide-psq383-project (npm)
- Aug 14, 2025
Malicious code in penguin-river-zyt524-project (npm)
- Aug 14, 2025
Malicious code in penguin-quilt-yik628-project (npm)
- Aug 14, 2025
Malicious code in penguin-quasar-lcj857-project (npm)
- Aug 14, 2025
Malicious code in penguin-meadow-siv765-project (npm)
- Aug 14, 2025
Malicious code in penguin-lunar-pw29 (npm)
- Aug 14, 2025
Malicious code in penguin-lilypad-fqc548-project (npm)
- Aug 14, 2025
Malicious code in penguin-kale-yyg839-project (npm)
- Aug 14, 2025
Malicious code in penguin-kale-vht182-project (npm)
- Aug 14, 2025
Malicious code in penguin-hill-zzu076-project (npm)
- Aug 14, 2025
Malicious code in penguin-gorilla-pfao (npm)
- Aug 14, 2025
Malicious code in penguin-aspen-nto671-project (npm)
- Aug 14, 2025
Malicious code in pelohips (npm)
- Aug 14, 2025
Malicious code in peloche (npm)
- Aug 14, 2025
Malicious code in pekuphone (npm)
- Aug 14, 2025
Malicious code in pegasus-oberon-child-process-sqlite (npm)
- Aug 14, 2025
Malicious code in pegasus-halley-nuxtjs-remark (npm)
- Aug 14, 2025
Malicious code in pegasus-element-ui-winston-event (npm)
Page 5874 of 7,327