Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in mike-w8h-project (npm)
- Aug 14, 2025
Malicious code in mike-volcano-atvw (npm)
- Aug 14, 2025
Malicious code in mike-vk3-project (npm)
- Aug 14, 2025
Malicious code in mike-victor-okar (npm)
- Aug 14, 2025
Malicious code in mike-va3-project (npm)
- Aug 14, 2025
Malicious code in mike-uniform-xxoy (npm)
- Aug 14, 2025
Malicious code in mike-uniform-m8js (npm)
- Aug 14, 2025
Malicious code in mike-ugli-vugs (npm)
- Aug 14, 2025
Malicious code in mike-ugli-rhfr (npm)
- Aug 14, 2025
Malicious code in mike-ugli-qmdp (npm)
- Aug 14, 2025
Malicious code in mike-ugli-ltwa (npm)
- Aug 14, 2025
Malicious code in mike-tango-7x3a (npm)
- Aug 14, 2025
Malicious code in mike-tangerine-toic (npm)
- Aug 14, 2025
Malicious code in mike-romeo-zwhd (npm)
- Aug 14, 2025
Malicious code in mike-romeo-ipmm (npm)
- Aug 14, 2025
Malicious code in mike-raspberry-xfux (npm)
- Aug 14, 2025
Malicious code in mike-rainbow-ueqd (npm)
- Aug 14, 2025
Malicious code in mike-quince-echo-uxgyg (npm)
- Aug 14, 2025
Malicious code in mike-qhs-project (npm)
- Aug 14, 2025
Malicious code in mike-parsnip-npkj (npm)
- Aug 14, 2025
Malicious code in mike-oscar-juliet-fklye (npm)
- Aug 14, 2025
Malicious code in mike-oscar-avlx (npm)
- Aug 14, 2025
Malicious code in mike-nutmeg-nyxz (npm)
- Aug 14, 2025
Malicious code in mike-november-date-djgbq (npm)
- Aug 14, 2025
Malicious code in mike-nex-project (npm)
- Aug 14, 2025
Malicious code in mike-mvg-project (npm)
- Aug 14, 2025
Malicious code in mike-lio-project (npm)
- Aug 14, 2025
Malicious code in mike-lima-fvqp (npm)
- Aug 14, 2025
Malicious code in mike-ley-project (npm)
- Aug 14, 2025
Malicious code in mike-l69-project (npm)
- Aug 14, 2025
Malicious code in mike-kv3-project (npm)
- Aug 14, 2025
Malicious code in mike-ko0-project (npm)
- Aug 14, 2025
Malicious code in mike-kiwi-romeo-owume (npm)
- Aug 14, 2025
Malicious code in mike-juliet-uniform-xwrzr (npm)
- Aug 14, 2025
Malicious code in mike-honeydew-sqbt (npm)
- Aug 14, 2025
Malicious code in mike-hgq-project (npm)
- Aug 14, 2025
Malicious code in mike-golf-mlvp (npm)
- Aug 14, 2025
Malicious code in mike-foxtrot-delta-nmfwc (npm)
- Aug 14, 2025
Malicious code in mike-fig-ivpk (npm)
- Aug 14, 2025
Malicious code in mike-equinox-b53f (npm)
- Aug 14, 2025
Malicious code in mike-e6a-project (npm)
- Aug 14, 2025
Malicious code in mike-date-bvon (npm)
- Aug 14, 2025
Malicious code in mike-anchor-st4t (npm)
- Aug 14, 2025
Malicious code in mike-aa8-project (npm)
- Aug 14, 2025
Malicious code in mike-a35-project (npm)
- Aug 14, 2025
Malicious code in mike-95e-project (npm)
- Aug 14, 2025
Malicious code in mike-7d9-project (npm)
- Aug 14, 2025
Malicious code in mike-5ng-project (npm)
- Aug 14, 2025
Malicious code in mikaku (npm)
- Aug 14, 2025
Malicious code in miiror (npm)
Page 5927 of 7,326