Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Aug 14, 2025
Malicious code in papaya-strawberry-nzps (npm)
- Aug 14, 2025
Malicious code in papaya-sierra-xigua-ayylk (npm)
- Aug 14, 2025
Malicious code in papaya-rxt-project (npm)
- Aug 14, 2025
Malicious code in papaya-romeo-lemon-azzen (npm)
- Aug 14, 2025
Malicious code in papaya-rja-project (npm)
- Aug 14, 2025
Malicious code in papaya-quebec-lima-zwmzb (npm)
- Aug 14, 2025
Malicious code in papaya-q6n-project (npm)
- Aug 14, 2025
Malicious code in papaya-papa-omue (npm)
- Aug 14, 2025
Malicious code in papaya-papa-banana-kafqj (npm)
- Aug 14, 2025
Malicious code in papaya-orange-uniform-yankm (npm)
- Aug 14, 2025
Malicious code in papaya-orange-charlie-omuva (npm)
- Aug 14, 2025
Malicious code in papaya-november-uvvp (npm)
- Aug 14, 2025
Malicious code in papaya-n9u-project (npm)
- Aug 14, 2025
Malicious code in papaya-mike-ugli-cmvei (npm)
- Aug 14, 2025
Malicious code in papaya-m7y-project (npm)
- Aug 14, 2025
Malicious code in papaya-lq6-project (npm)
- Aug 14, 2025
Malicious code in papaya-lima-cvun (npm)
- Aug 14, 2025
Malicious code in papaya-lima-ajqe (npm)
- Aug 14, 2025
Malicious code in papaya-lemon-apple-xiqsf (npm)
- Aug 14, 2025
Malicious code in papaya-india-vvrz (npm)
- Aug 14, 2025
Malicious code in papaya-i83-project (npm)
- Aug 14, 2025
Malicious code in papaya-hotel-bgjb (npm)
- Aug 14, 2025
Malicious code in papaya-hnb-project (npm)
- Aug 14, 2025
Malicious code in papaya-harbor-1jo5 (npm)
- Aug 14, 2025
Malicious code in papaya-h5y-project (npm)
- Aug 14, 2025
Malicious code in papaya-golf-o396 (npm)
- Aug 14, 2025
Malicious code in papaya-golf-bravo-ckprt (npm)
- Aug 14, 2025
Malicious code in papaya-fig-yam-hoeaf (npm)
- Aug 14, 2025
Malicious code in papaya-f59-project (npm)
- Aug 14, 2025
Malicious code in papaya-f09-project (npm)
- Aug 14, 2025
Malicious code in papaya-elderberry-oscar-miaze (npm)
- Aug 14, 2025
Malicious code in papaya-echo-yankee-uvttz (npm)
- Aug 14, 2025
Malicious code in papaya-date-nste (npm)
- Aug 14, 2025
Malicious code in papaya-bravo-kyxw (npm)
- Aug 14, 2025
Malicious code in papaya-banana-xigua-tulto (npm)
- Aug 14, 2025
Malicious code in papaya-a5m-project (npm)
- Aug 14, 2025
Malicious code in papaya-9dz-project (npm)
- Aug 14, 2025
Malicious code in papaya-8te-project (npm)
- Aug 14, 2025
Malicious code in papaya-7tc-project (npm)
- Aug 14, 2025
Malicious code in papaya-6pt-project (npm)
- Aug 14, 2025
Malicious code in papaya-640-project (npm)
- Aug 14, 2025
Malicious code in papaya-49j-project (npm)
- Aug 14, 2025
Malicious code in papaya-3vr-project (npm)
- Aug 14, 2025
Malicious code in papaya-2eu-project (npm)
- Aug 14, 2025
Malicious code in papaya-29m-project (npm)
- Aug 14, 2025
Malicious code in papaulo (npm)
- Aug 14, 2025
Malicious code in papa-znv-project (npm)
- Aug 14, 2025
Malicious code in papa-yambean-hjf4 (npm)
- Aug 14, 2025
Malicious code in papa-xray-zulu-ifvbo (npm)
- Aug 14, 2025
Malicious code in papa-xray-cdmv (npm)
Page 5879 of 7,327