Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Aug 14, 2025
Malicious code in okta-i18n-bundles (npm)
- Aug 14, 2025
Malicious code in okta-hosted-login (npm)
- Aug 14, 2025
Malicious code in okta-gandul53-breki (npm)
- Aug 14, 2025
Malicious code in okta-gado-gado45-breki (npm)
- Aug 14, 2025
Malicious code in okmcyrplhnvewxfu (npm)
- Aug 14, 2025
Malicious code in okipeqhzwdvtnkjx (npm)
- Aug 14, 2025
Malicious code in okimmo-api (npm)
- Aug 14, 2025
Malicious code in okcollege-web-api (npm)
- Aug 14, 2025
Malicious code in oj-lint (npm)
- Aug 14, 2025
Malicious code in oishii (npm)
- Aug 14, 2025
Malicious code in oijsoijs (npm)
- Aug 14, 2025
Malicious code in ohzombies (npm)
- Aug 14, 2025
Malicious code in ohzbxrstnigemckp (npm)
- Aug 14, 2025
Malicious code in ohomework (npm)
- Aug 14, 2025
Malicious code in ohmkit (npm)
- Aug 14, 2025
Malicious code in oh-no (npm)
- Aug 14, 2025
Malicious code in ogxuwszqlpbfjymn (npm)
- Aug 14, 2025
Malicious code in ogreprj (npm)
- Aug 14, 2025
Malicious code in ogreport (npm)
- Aug 14, 2025
Malicious code in ogrelite (npm)
- Aug 14, 2025
Malicious code in ogi-sate8-breki (npm)
- Aug 14, 2025
Malicious code in ogi-rujak61-sukiwir (npm)
- Aug 14, 2025
Malicious code in ogi-miemee12-breki (npm)
- Aug 14, 2025
Malicious code in ogi-mendoan55-breki (npm)
- Aug 14, 2025
Malicious code in ogi-dradag52-kuki (npm)
- Aug 14, 2025
Malicious code in oggvosh (npm)
- Aug 14, 2025
Malicious code in og-cafe (npm)
- Aug 14, 2025
Malicious code in ofxtablet (npm)
- Aug 14, 2025
Malicious code in ofxsqlite (npm)
- Aug 14, 2025
Malicious code in ofxopenvj (npm)
- Aug 14, 2025
Malicious code in ofxdmx (npm)
- Aug 14, 2025
Malicious code in offsite_payments (npm)
- Aug 14, 2025
Malicious code in office-ui-fabric-react-repo (npm)
- Aug 14, 2025
Malicious code in oewebdoc (npm)
- Aug 14, 2025
Malicious code in odin-hydrogeology-dagda-middleware (npm)
- Aug 14, 2025
Malicious code in odin-ganymede-upgrade-semantic-release (npm)
- Aug 14, 2025
Malicious code in odin-biosignature-passport-dendrochronology (npm)
- Aug 14, 2025
Malicious code in odguest (npm)
- Aug 14, 2025
Malicious code in oddornot (npm)
- Aug 14, 2025
Malicious code in oddjob (npm)
- Aug 14, 2025
Malicious code in odash (npm)
- Aug 14, 2025
Malicious code in oculusfpv (npm)
- Aug 14, 2025
Malicious code in oculista (npm)
- Aug 14, 2025
Malicious code in octopus-whirlpool-ejn271-project (npm)
- Aug 14, 2025
Malicious code in octopus-sequoia-elc401-project (npm)
- Aug 14, 2025
Malicious code in octopus-quasar-lcx959-project (npm)
- Aug 14, 2025
Malicious code in octopus-quasar-gqu322-project (npm)
- Aug 14, 2025
Malicious code in octopus-hollow-bvz446-project (npm)
- Aug 14, 2025
Malicious code in octopus-gorge-hes657-project (npm)
- Aug 14, 2025
Malicious code in octopus-everest-prx975-project (npm)
Page 5891 of 7,327