Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Aug 14, 2025
Malicious code in mdiallo (npm)
- Aug 14, 2025
Malicious code in mdhindsa (npm)
- Aug 14, 2025
Malicious code in mdevcon (npm)
- Aug 14, 2025
Malicious code in mdba (npm)
- Aug 14, 2025
Malicious code in mdb-angular2 (npm)
- Aug 14, 2025
Malicious code in mcwcasinoonline (npm)
- Aug 14, 2025
Malicious code in mcwcasino2025 (npm)
- Aug 14, 2025
Malicious code in mcucomm (npm)
- Aug 14, 2025
Malicious code in mcrepos (npm)
- Aug 14, 2025
Malicious code in mcpx (npm)
- Aug 14, 2025
Malicious code in mcptest-win32-x64 (npm)
- Aug 14, 2025
Malicious code in mcproject (npm)
- Aug 14, 2025
Malicious code in mcp-opencage-server (npm)
- Aug 14, 2025
Malicious code in mcp-menu (npm)
- Aug 14, 2025
Malicious code in mcmanager (npm)
- Aug 14, 2025
Malicious code in mchecker (npm)
- Aug 14, 2025
Malicious code in mccserv (npm)
- Aug 14, 2025
Malicious code in mccportal (npm)
- Aug 14, 2025
Malicious code in mccoll (npm)
- Aug 14, 2025
Malicious code in mcasino (npm)
- Aug 14, 2025
Malicious code in mcadvert (npm)
- Aug 14, 2025
Malicious code in mca-product-type-utils (npm)
- Aug 14, 2025
Malicious code in mbtweet (npm)
- Aug 14, 2025
Malicious code in mbrooker (npm)
- Aug 14, 2025
Malicious code in mboxxx (npm)
- Aug 14, 2025
Malicious code in mbltdev (npm)
- Aug 14, 2025
Malicious code in mblockly-sensorium (npm)
- Aug 14, 2025
Malicious code in mbasic (npm)
- Aug 14, 2025
Malicious code in mb-auth (npm)
- Aug 14, 2025
Malicious code in mazular (npm)
- Aug 14, 2025
Malicious code in mazerpg (npm)
- Aug 14, 2025
Malicious code in mazayaweb (npm)
- Aug 14, 2025
Malicious code in mayowish (npm)
- Aug 14, 2025
Malicious code in maybemaliciouspackage (npm)
- Aug 14, 2025
Malicious code in mayapbrt (npm)
- Aug 14, 2025
Malicious code in mayacui (npm)
- Aug 14, 2025
Malicious code in maya-saguer55-breki (npm)
- Aug 14, 2025
Malicious code in maya-klipo96-sukiwir (npm)
- Aug 14, 2025
Malicious code in maya-gorengan19-breki (npm)
- Aug 14, 2025
Malicious code in maxwidth (npm)
- Aug 14, 2025
Malicious code in maxuxo (npm)
- Aug 14, 2025
Malicious code in maxlibs (npm)
- Aug 14, 2025
Malicious code in MAXIMjs (npm)
- Aug 14, 2025
Malicious code in maxgittry (npm)
- Aug 14, 2025
Malicious code in maxclient (npm)
- Aug 14, 2025
Malicious code in mawithmt (npm)
- Aug 14, 2025
Malicious code in maven-deps (npm)
- Aug 14, 2025
Malicious code in maukau (npm)
- Aug 14, 2025
Malicious code in matthaeus (npm)
- Aug 14, 2025
Malicious code in matrixc (npm)
Page 5933 of 7,326