Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Aug 14, 2025
Malicious code in osuauv (npm)
- Aug 14, 2025
Malicious code in ostocy (npm)
- Aug 14, 2025
Malicious code in ostat-win32-x64-msvc (npm)
- Aug 14, 2025
Malicious code in osstracker (npm)
- Aug 14, 2025
Malicious code in osscripts (npm)
- Aug 14, 2025
Malicious code in osscla (npm)
- Aug 14, 2025
Malicious code in osscamp (npm)
- Aug 14, 2025
Malicious code in oss-catalog (npm)
- Aug 14, 2025
Malicious code in osrachem (npm)
- Aug 14, 2025
Malicious code in ospriet (npm)
- Aug 14, 2025
Malicious code in osmpoll (npm)
- Aug 14, 2025
Malicious code in osmo-ts (npm)
- Aug 14, 2025
Malicious code in osmlib (npm)
- Aug 14, 2025
Malicious code in osjmrfpakyugwvqh (npm)
- Aug 14, 2025
Malicious code in osi-services (npm)
- Aug 14, 2025
Malicious code in osgist (npm)
- Aug 14, 2025
Malicious code in oscshp-frontend-starter-kit (npm)
- Aug 14, 2025
Malicious code in oscillation-metabolomics-non-blocking-release-it (npm)
- Aug 14, 2025
Malicious code in oscillation-exobiology-ora-pyxis (npm)
- Aug 14, 2025
Malicious code in oscar-zulu-charlie-qjbxg (npm)
- Aug 14, 2025
Malicious code in oscar-yankee-pecr (npm)
- Aug 14, 2025
Malicious code in oscar-yankee-jfop (npm)
- Aug 14, 2025
Malicious code in oscar-yam-hotel-fpude (npm)
- Aug 14, 2025
Malicious code in oscar-yam-grape-tbsyo (npm)
- Aug 14, 2025
Malicious code in oscar-xu8-project (npm)
- Aug 14, 2025
Malicious code in oscar-xray-kilo-uutps (npm)
- Aug 14, 2025
Malicious code in oscar-xray-jwat (npm)
- Aug 14, 2025
Malicious code in oscar-xray-bupf (npm)
- Aug 14, 2025
Malicious code in oscar-x5u-project (npm)
- Aug 14, 2025
Malicious code in oscar-wf1-project (npm)
- Aug 14, 2025
Malicious code in oscar-wdd-project (npm)
- Aug 14, 2025
Malicious code in oscar-watermelon-zacv (npm)
- Aug 14, 2025
Malicious code in oscar-wasabi-epm7 (npm)
- Aug 14, 2025
Malicious code in oscar-victor-ykkf (npm)
- Aug 14, 2025
Malicious code in oscar-victor-xray-wlngc (npm)
- Aug 14, 2025
Malicious code in oscar-victor-imny (npm)
- Aug 14, 2025
Malicious code in oscar-vbq-project (npm)
- Aug 14, 2025
Malicious code in oscar-vanilla-ydxh (npm)
- Aug 14, 2025
Malicious code in oscar-vanilla-tkpx (npm)
- Aug 14, 2025
Malicious code in oscar-uniform-sjlk (npm)
- Aug 14, 2025
Malicious code in oscar-ulv-project (npm)
- Aug 14, 2025
Malicious code in oscar-ugli-zrya (npm)
- Aug 14, 2025
Malicious code in oscar-tgw-project (npm)
- Aug 14, 2025
Malicious code in oscar-supernova-zwhd (npm)
- Aug 14, 2025
Malicious code in oscar-sierra-xiwj (npm)
- Aug 14, 2025
Malicious code in oscar-sierra-victor-jkmeo (npm)
- Aug 14, 2025
Malicious code in oscar-s1e-project (npm)
- Aug 14, 2025
Malicious code in oscar-raspberry-ktkv (npm)
- Aug 14, 2025
Malicious code in oscar-quince-ddpu (npm)
- Aug 14, 2025
Malicious code in oscar-quebec-papaya-dlvqg (npm)
Page 5883 of 7,327