Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Aug 14, 2025
Malicious code in oberon-css-loader-neptunology-auth0 (npm)
- Aug 14, 2025
Malicious code in oberon-blaze-apollo-pegasus (npm)
- Aug 14, 2025
Malicious code in obelisk_q0e5v_2z4of_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in obelisk_pjsy1_mbfb8_maple (npm)
- Aug 14, 2025
Malicious code in obelisk_pf8uw_iquis_jasmine (npm)
- Aug 14, 2025
Malicious code in obelisk_mp54q_rsjbk_lullaby (npm)
- Aug 14, 2025
Malicious code in obelisk_kneej_x2xas_limestone (npm)
- Aug 14, 2025
Malicious code in obelisk_fyf9i_c66wj_kestrel (npm)
- Aug 14, 2025
Malicious code in obatkuat (npm)
- Aug 14, 2025
Malicious code in oaxaca (npm)
- Aug 14, 2025
Malicious code in oauthdojo (npm)
- Aug 14, 2025
Malicious code in oauthapi (npm)
- Aug 14, 2025
Malicious code in oauth-web-flow (npm)
- Aug 14, 2025
Malicious code in oauth-walkthrough (npm)
- Aug 14, 2025
Malicious code in oauth-procyon-sequelize-dendrochronology (npm)
- Aug 14, 2025
Malicious code in oauth-hermes-release-it-nebula (npm)
- Aug 14, 2025
Malicious code in oasis_sfsqj_bfjkv_dew (npm)
- Aug 14, 2025
Malicious code in oasis_piccv_o3xm3_infinity (npm)
- Aug 14, 2025
Malicious code in oasis_fva33_5yxyh_zenith (npm)
- Aug 14, 2025
Malicious code in oasis_cggzq_bnrzd_quasar (npm)
- Aug 14, 2025
Malicious code in oasis_b1xr1_m8fg6_voyage (npm)
- Aug 14, 2025
Malicious code in oasis-xvbad-abn2r-quill-project (npm)
- Aug 14, 2025
Malicious code in oasis-x9ybz-n1yes-unity-project (npm)
- Aug 14, 2025
Malicious code in oasis-wallet (npm)
- Aug 14, 2025
Malicious code in oasis-q3an5-xfmxa-nymph-project (npm)
- Aug 14, 2025
Malicious code in oasis-kj0dc-r42bz-glow-project (npm)
- Aug 14, 2025
Malicious code in oasis-ivory-tpq806-project (npm)
- Aug 14, 2025
Malicious code in oasis-auo12-4wf7d-cascade-project (npm)
- Aug 14, 2025
Malicious code in oasis-59qsj-xdrzi-jade-project (npm)
- Aug 14, 2025
Malicious code in oaooya (npm)
- Aug 14, 2025
Malicious code in oaonline (npm)
- Aug 14, 2025
Malicious code in oaobbwo (npm)
- Aug 14, 2025
Malicious code in oak-zephyr-equ628-project (npm)
- Aug 14, 2025
Malicious code in oak-zenith-cdt982-project (npm)
- Aug 14, 2025
Malicious code in oak-redwood-8b5z (npm)
- Aug 14, 2025
Malicious code in oak-quinoa-13os (npm)
- Aug 14, 2025
Malicious code in oak-ocean-blo864-project (npm)
- Aug 14, 2025
Malicious code in oak-nebula-vu2v (npm)
- Aug 14, 2025
Malicious code in oak-moose-xbl178-project (npm)
- Aug 14, 2025
Malicious code in oak-moon-glz133-project (npm)
- Aug 14, 2025
Malicious code in oak-lettuce-hhga (npm)
- Aug 14, 2025
Malicious code in oak-kaleidoscope-psk469-project (npm)
- Aug 14, 2025
Malicious code in oak-jellyfish-zfj602-project (npm)
- Aug 14, 2025
Malicious code in oak-jasmine-clb091-project (npm)
- Aug 14, 2025
Malicious code in oak-hollow-qdw478-project (npm)
- Aug 14, 2025
Malicious code in oak-golf-fo3p (npm)
- Aug 14, 2025
Malicious code in oak-ecosystem-dsr819-project (npm)
- Aug 14, 2025
Malicious code in oak-dewdrop-rmz810-project (npm)
- Aug 14, 2025
Malicious code in oak-desert-ecm868-project (npm)
- Aug 14, 2025
Malicious code in oak-buffalo-ksf833-project (npm)
Page 5894 of 7,327