Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,286 total · sorted newest first- Aug 14, 2025
Malicious code in myfang (npm)
- Aug 14, 2025
Malicious code in myenyoapp (npm)
- Aug 14, 2025
Malicious code in myedit (npm)
- Aug 14, 2025
Malicious code in mydumper (npm)
- Aug 14, 2025
Malicious code in mydouban (npm)
- Aug 14, 2025
Malicious code in mydebut (npm)
- Aug 14, 2025
Malicious code in mycommits (npm)
- Aug 14, 2025
Malicious code in mycodesvn (npm)
- Aug 14, 2025
Malicious code in mychatter (npm)
- Aug 14, 2025
Malicious code in mychatapp (npm)
- Aug 14, 2025
Malicious code in mybpps (npm)
- Aug 14, 2025
Malicious code in mybema (npm)
- Aug 14, 2025
Malicious code in mybeacons (npm)
- Aug 14, 2025
Malicious code in myazure (npm)
- Aug 14, 2025
Malicious code in myavrasm (npm)
- Aug 14, 2025
Malicious code in my_helper_js (npm)
- Aug 14, 2025
Malicious code in my-very-own-package (npm)
- Aug 14, 2025
Malicious code in my-treats-app (npm)
- Aug 14, 2025
Malicious code in my-testing-project (npm)
- Aug 14, 2025
Malicious code in my-test-avvo (npm)
- Aug 14, 2025
Malicious code in my-npm-ognjetina (npm)
- Aug 14, 2025
Malicious code in my-npm-fareez1234 (npm)
- Aug 14, 2025
Malicious code in my-first-addon (npm)
- Aug 14, 2025
Malicious code in my-cli-app (npm)
- Aug 14, 2025
Malicious code in mxxh9v (npm)
- Aug 14, 2025
Malicious code in mxseklcjpvkhoigt (npm)
- Aug 14, 2025
Malicious code in mxkeanutcqjyvspl (npm)
- Aug 14, 2025
Malicious code in mxitpug (npm)
- Aug 14, 2025
Malicious code in mx-client-clients (npm)
- Aug 14, 2025
Malicious code in MWS_Automation (npm)
- Aug 14, 2025
Malicious code in mwkphrnliduxtfeg (npm)
- Aug 14, 2025
Malicious code in mwater-expressions-ui (npm)
- Aug 14, 2025
Malicious code in mw4qnb (npm)
- Aug 14, 2025
Malicious code in mw-influencers (npm)
- Aug 14, 2025
Malicious code in mw-eslint-rules (npm)
- Aug 14, 2025
Malicious code in mvvmrx (npm)
- Aug 14, 2025
Malicious code in mvvmkit (npm)
- Aug 14, 2025
Malicious code in mvulekokjsyznarb (npm)
- Aug 14, 2025
Malicious code in mvplayer (npm)
- Aug 14, 2025
Malicious code in mvpipe (npm)
- Aug 14, 2025
Malicious code in mvcrest (npm)
- Aug 14, 2025
Malicious code in mvcauth (npm)
- Aug 14, 2025
Malicious code in mvc-seneca (npm)
- Aug 14, 2025
Malicious code in mvalcu (npm)
- Aug 14, 2025
Malicious code in mvaayoo (npm)
- Aug 14, 2025
Malicious code in mv-evip (npm)
- Aug 14, 2025
Malicious code in muzikant (npm)
- Aug 14, 2025
Malicious code in muzicbaux (npm)
- Aug 14, 2025
Malicious code in muzagram (npm)
- Aug 14, 2025
Malicious code in muusio (npm)
Page 5915 of 7,326