Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Aug 14, 2025
Malicious code in onedata (npm)
- Aug 14, 2025
Malicious code in one-to-one-sample (npm)
- Aug 14, 2025
Malicious code in ondemand-title_page (npm)
- Aug 14, 2025
Malicious code in ondemand-settings (npm)
- Aug 14, 2025
Malicious code in ondabike (npm)
- Aug 14, 2025
Malicious code in on-middleware-pulsar-jabbah (npm)
- Aug 14, 2025
Malicious code in on-meteor-quasarjet-boson (npm)
- Aug 14, 2025
Malicious code in on-key-press (npm)
- Aug 14, 2025
Malicious code in on-impulse-gulp-abiogenesis (npm)
- Aug 14, 2025
Malicious code in on-duplex-perseus-quasar (npm)
- Aug 14, 2025
Malicious code in omnivideo (npm)
- Aug 14, 2025
Malicious code in omnirom (npm)
- Aug 14, 2025
Malicious code in omnihotel (npm)
- Aug 14, 2025
Malicious code in omniauth-shopify-oauth2 (npm)
- Aug 14, 2025
Malicious code in omnia-foundation (npm)
- Aug 14, 2025
Malicious code in omni-law-menu-section (npm)
- Aug 14, 2025
Malicious code in omicron-load-import-stub-thread (npm)
- Aug 14, 2025
Malicious code in omicron-deploy-index-bad-sun (npm)
- Aug 14, 2025
Malicious code in omgaqiujfkwblpxd (npm)
- Aug 14, 2025
Malicious code in omekadd (npm)
- Aug 14, 2025
Malicious code in omegawd (npm)
- Aug 14, 2025
Malicious code in omegacen (npm)
- Aug 14, 2025
Malicious code in omega-xml-assert-notify-iota (npm)
- Aug 14, 2025
Malicious code in omega-pipe-stub-encode-easy (npm)
- Aug 14, 2025
Malicious code in omega-old-catch-report-sanitize (npm)
- Aug 14, 2025
Malicious code in omega-cms-lf-ng-md-file-input (npm)
- Aug 14, 2025
Malicious code in omails (npm)
- Aug 14, 2025
Malicious code in olzbvmrdkqyxagef (npm)
- Aug 14, 2025
Malicious code in oludog (npm)
- Aug 14, 2025
Malicious code in oles-mixins (npm)
- Aug 14, 2025
Malicious code in oldash (npm)
- Aug 14, 2025
Malicious code in old-throw-chi-boolean-slow (npm)
- Aug 14, 2025
Malicious code in old-secure-table-await-index (npm)
- Aug 14, 2025
Malicious code in olapi (npm)
- Aug 14, 2025
Malicious code in olamovani (npm)
- Aug 14, 2025
Malicious code in olakedms (npm)
- Aug 14, 2025
Malicious code in ol3-popup (npm)
- Aug 14, 2025
Malicious code in oktakit (npm)
- Aug 14, 2025
Malicious code in oktafian-tempe15-breki (npm)
- Aug 14, 2025
Malicious code in oktafian-takokak25-sukiwir (npm)
- Aug 14, 2025
Malicious code in oktafian-ongol-ongol68-kuki (npm)
- Aug 14, 2025
Malicious code in oktafian-martabak28-breki (npm)
- Aug 14, 2025
Malicious code in oktafian-lumpur56-breki (npm)
- Aug 14, 2025
Malicious code in oktafian-liwet86-breki (npm)
- Aug 14, 2025
Malicious code in oktafian-kolak85-kuki (npm)
- Aug 14, 2025
Malicious code in oktafian-klipo10-sukiwir (npm)
- Aug 14, 2025
Malicious code in oktafian-bika11-sukiwir (npm)
- Aug 14, 2025
Malicious code in okta-serimuka74-breki (npm)
- Aug 14, 2025
Malicious code in okta-sdk-golang-openapi (npm)
- Aug 14, 2025
Malicious code in okta-kue51-breki (npm)
Page 5890 of 7,327