Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Aug 14, 2025
Malicious code in paginaa (npm)
- Aug 14, 2025
Malicious code in pagengo (npm)
- Aug 14, 2025
Malicious code in pagehtm (npm)
- Aug 14, 2025
Malicious code in packwerk (npm)
- Aug 14, 2025
Malicious code in packages.json (npm)
- Aug 14, 2025
Malicious code in packages-lock.json (npm)
- Aug 14, 2025
Malicious code in packagecontainer (npm)
- Aug 14, 2025
Malicious code in package-jsonp-json-soap (npm)
- Aug 14, 2025
Malicious code in package-jauseg (npm)
- Aug 14, 2025
Malicious code in package-dorado-css-minimizer-webpack-plugin-jovian (npm)
- Aug 14, 2025
Malicious code in pac-theme-base (npm)
- Aug 14, 2025
Malicious code in pa-scout (npm)
- Aug 14, 2025
Malicious code in p8ut63 (npm)
- Aug 14, 2025
Malicious code in p5-bbox-aligned-word (npm)
- Aug 14, 2025
Malicious code in p12_front-end-with-react (npm)
- Aug 14, 2025
Malicious code in p0wn (npm)
- Aug 14, 2025
Malicious code in p-traffic (npm)
- Aug 14, 2025
Malicious code in ozwyhfivjkdueqxs (npm)
- Aug 14, 2025
Malicious code in ozonshop (npm)
- Aug 14, 2025
Malicious code in ozjsvkhciulqyefr (npm)
- Aug 14, 2025
Malicious code in ozatrace (npm)
- Aug 14, 2025
Malicious code in oyabindev (npm)
- Aug 14, 2025
Malicious code in oxygen-workers-types (npm)
- Aug 14, 2025
Malicious code in oxione (npm)
- Aug 14, 2025
Malicious code in oxcrawler (npm)
- Aug 14, 2025
Malicious code in oxandcart-admin (npm)
- Aug 14, 2025
Malicious code in oxadverts (npm)
- Aug 14, 2025
Malicious code in owl-orchard-apple-sunshine (npm)
- Aug 14, 2025
Malicious code in owhblank (npm)
- Aug 14, 2025
Malicious code in owenwx (npm)
- Aug 14, 2025
Malicious code in ow-ng-faces (npm)
- Aug 14, 2025
Malicious code in ovrelord (npm)
- Aug 14, 2025
Malicious code in overnet (npm)
- Aug 14, 2025
Malicious code in outspline (npm)
- Aug 14, 2025
Malicious code in outiiil (npm)
- Aug 14, 2025
Malicious code in outgrader (npm)
- Aug 14, 2025
Malicious code in outercore-radiant-astrobiology-entanglement (npm)
- Aug 14, 2025
Malicious code in outercore-geoarchaeology-bellatrix-whitedwarf (npm)
- Aug 14, 2025
Malicious code in outer-html (npm)
- Aug 14, 2025
Malicious code in outage-form (npm)
- Aug 14, 2025
Malicious code in ourtunes (npm)
- Aug 14, 2025
Malicious code in ounziw (npm)
- Aug 14, 2025
Malicious code in ouklida (npm)
- Aug 14, 2025
Malicious code in otc-docs-language (npm)
- Aug 14, 2025
Malicious code in ot-eda-node (npm)
- Aug 14, 2025
Malicious code in ot-eda-messages (npm)
- Aug 14, 2025
Malicious code in osxmonad (npm)
- Aug 14, 2025
Malicious code in osxapps (npm)
- Aug 14, 2025
Malicious code in oswatch (npm)
- Aug 14, 2025
Malicious code in osuexport (npm)
Page 5882 of 7,327