Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Aug 14, 2025
Malicious code in opal-wisp-jow411-project (npm)
- Aug 14, 2025
Malicious code in opal-v1sj5-2y74b-grove-project (npm)
- Aug 14, 2025
Malicious code in opal-saturn-gkh835-project (npm)
- Aug 14, 2025
Malicious code in opal-sapphire-eqw389-project (npm)
- Aug 14, 2025
Malicious code in opal-reef-cwo534-project (npm)
- Aug 14, 2025
Malicious code in opal-quasar-xno277-project (npm)
- Aug 14, 2025
Malicious code in opal-quagmire-cdw011-project (npm)
- Aug 14, 2025
Malicious code in opal-qdbth-smu7z-spark-project (npm)
- Aug 14, 2025
Malicious code in opal-poplh-iqhkh-quill-project (npm)
- Aug 14, 2025
Malicious code in opal-oak-mcc159-project (npm)
- Aug 14, 2025
Malicious code in opal-mya48-4h6c2-lucid-project (npm)
- Aug 14, 2025
Malicious code in opal-moon-dis924-project (npm)
- Aug 14, 2025
Malicious code in opal-meadow-vpc477-project (npm)
- Aug 14, 2025
Malicious code in opal-meadow-ptt956-project (npm)
- Aug 14, 2025
Malicious code in opal-meadow-ffl410-project (npm)
- Aug 14, 2025
Malicious code in opal-jasmine-phw233-project (npm)
- Aug 14, 2025
Malicious code in opal-jasmine-cxl037-project (npm)
- Aug 14, 2025
Malicious code in opal-icicle-cvv709-project (npm)
- Aug 14, 2025
Malicious code in opal-hedgehog-paf134-project (npm)
- Aug 14, 2025
Malicious code in opal-hedgehog-bbk109-project (npm)
- Aug 14, 2025
Malicious code in opal-fern-ary593-project (npm)
- Aug 14, 2025
Malicious code in opal-dolphin-ttc955-project (npm)
- Aug 14, 2025
Malicious code in opal-cxkhw-gw930-lunar-project (npm)
- Aug 14, 2025
Malicious code in opal-caravan-vxy155-project (npm)
- Aug 14, 2025
Malicious code in opal-avlnc-9apet-lunar-project (npm)
- Aug 14, 2025
Malicious code in op-template-engine (npm)
- Aug 14, 2025
Malicious code in op-payment-widget-v3 (npm)
- Aug 14, 2025
Malicious code in op-payment-live-validation (npm)
- Aug 14, 2025
Malicious code in op-payment-account (npm)
- Aug 14, 2025
Malicious code in op-identify-card (npm)
- Aug 14, 2025
Malicious code in ootrainer (npm)
- Aug 14, 2025
Malicious code in oortcloud-blackhole-galaxy-blackhole (npm)
- Aug 14, 2025
Malicious code in oortcloud-biohacking-oauth-cladistics (npm)
- Aug 14, 2025
Malicious code in onzu-story (npm)
- Aug 14, 2025
Malicious code in onwu2 (npm)
- Aug 14, 2025
Malicious code in ontrails (npm)
- Aug 14, 2025
Malicious code in ont-ts (npm)
- Aug 14, 2025
Malicious code in onmymind (npm)
- Aug 14, 2025
Malicious code in only-test-not-install (npm)
- Aug 14, 2025
Malicious code in onixpod (npm)
- Aug 14, 2025
Malicious code in onifixer (npm)
- Aug 14, 2025
Malicious code in onhktuwcbazvgfkr (npm)
- Aug 14, 2025
Malicious code in onfile (npm)
- Aug 14, 2025
Malicious code in onestroke (npm)
- Aug 14, 2025
Malicious code in oneshot-application-api (npm)
- Aug 14, 2025
Malicious code in oneshike (npm)
- Aug 14, 2025
Malicious code in ones-ai-web (npm)
- Aug 14, 2025
Malicious code in onepush-browser-notifications (npm)
- Aug 14, 2025
Malicious code in onedrive-verification (npm)
- Aug 14, 2025
Malicious code in onedemo (npm)
Page 5889 of 7,327