Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in mii-cli (npm)
- Aug 14, 2025
Malicious code in mihiro (npm)
- Aug 14, 2025
Malicious code in migration-progress-announce (npm)
- Aug 14, 2025
Malicious code in midworld (npm)
- Aug 14, 2025
Malicious code in midway-xtpl (npm)
- Aug 14, 2025
Malicious code in midway-logger (npm)
- Aug 14, 2025
Malicious code in midway-dataproxy (npm)
- Aug 14, 2025
Malicious code in midway-cache (npm)
- Aug 14, 2025
Malicious code in midnights (npm)
- Aug 14, 2025
Malicious code in miditocv (npm)
- Aug 14, 2025
Malicious code in midibin-api (npm)
- Aug 14, 2025
Malicious code in midi-sdk (npm)
- Aug 14, 2025
Malicious code in midi-instrument (npm)
- Aug 14, 2025
Malicious code in midepa (npm)
- Aug 14, 2025
Malicious code in middleware-nestjs-postcss-leda (npm)
- Aug 14, 2025
Malicious code in middleware-lacerta-cladistics-thermosphere (npm)
- Aug 14, 2025
Malicious code in micromachines (npm)
- Aug 14, 2025
Malicious code in microlan (npm)
- Aug 14, 2025
Malicious code in microejb (npm)
- Aug 14, 2025
Malicious code in microcode (npm)
- Aug 14, 2025
Malicious code in microbase (npm)
- Aug 14, 2025
Malicious code in micro-tools (npm)
- Aug 14, 2025
Malicious code in micro-container (npm)
- Aug 14, 2025
Malicious code in micketest (npm)
- Aug 14, 2025
Malicious code in mickeleee (npm)
- Aug 14, 2025
Malicious code in micepiece (npm)
- Aug 14, 2025
Malicious code in micelius (npm)
- Aug 14, 2025
Malicious code in mi-angular-vmp-auth-service (npm)
- Aug 14, 2025
Malicious code in mi-angular-videomanager-pro-apikit (npm)
- Aug 14, 2025
Malicious code in mhxsdcn (npm)
- Aug 14, 2025
Malicious code in mhsvlc (npm)
- Aug 14, 2025
Malicious code in mhnr3k (npm)
- Aug 14, 2025
Malicious code in mhilzjbcryfwktve (npm)
- Aug 14, 2025
Malicious code in mhfqbvlzdxjnsrye (npm)
- Aug 14, 2025
Malicious code in mharizfbkldoeycv (npm)
- Aug 14, 2025
Malicious code in mhandisi (npm)
- Aug 14, 2025
Malicious code in mgyt4s (npm)
- Aug 14, 2025
Malicious code in mgenie (npm)
- Aug 14, 2025
Malicious code in mgauss (npm)
- Aug 14, 2025
Malicious code in mg-graph (npm)
- Aug 14, 2025
Malicious code in mftrace (npm)
- Aug 14, 2025
Malicious code in mfrt3 (npm)
- Aug 14, 2025
Malicious code in mfp-cli (npm)
- Aug 14, 2025
Malicious code in mforecast (npm)
- Aug 14, 2025
Malicious code in mfodxcvzhegntkjr (npm)
- Aug 14, 2025
Malicious code in mflect (npm)
- Aug 14, 2025
Malicious code in meynardp (npm)
- Aug 14, 2025
Malicious code in mewnpcs (npm)
- Aug 14, 2025
Malicious code in meuteste (npm)
- Aug 14, 2025
Malicious code in meurepo (npm)
Page 5928 of 7,326