Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in azkaban_scheduler (npm)
- Aug 14, 2025
Malicious code in azienda (npm)
- Aug 14, 2025
Malicious code in azcylwbqdhknsexv (npm)
- Aug 14, 2025
Malicious code in azcoin (npm)
- Aug 14, 2025
Malicious code in azagra (npm)
- Aug 14, 2025
Malicious code in az-ext (npm)
- Aug 14, 2025
Malicious code in az-css (npm)
- Aug 14, 2025
Malicious code in az-bundler (npm)
- Aug 14, 2025
Malicious code in aystools (npm)
- Aug 14, 2025
Malicious code in aysnc (npm)
- Aug 14, 2025
Malicious code in aylobot (npm)
- Aug 14, 2025
Malicious code in ayabie (npm)
- Aug 14, 2025
Malicious code in axsrvuofnzhdctkq (npm)
- Aug 14, 2025
Malicious code in axserver (npm)
- Aug 14, 2025
Malicious code in axois (npm)
- Aug 14, 2025
Malicious code in axoeyob (npm)
- Aug 14, 2025
Malicious code in axlsort (npm)
- Aug 14, 2025
Malicious code in axioss (npm)
- Aug 14, 2025
Malicious code in axios-transport-quantum-computing-terraforming (npm)
- Aug 14, 2025
Malicious code in axios-repository-markdownlint-electron-builder (npm)
- Aug 14, 2025
Malicious code in axios-proteomics-superflare-frontend (npm)
- Aug 14, 2025
Malicious code in axios-http (npm)
- Aug 14, 2025
Malicious code in axios-ethology-indus-zenobia (npm)
- Aug 14, 2025
Malicious code in axios-carpo-spectroscopy-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in axios-antimatter-nextjs-leda (npm)
- Aug 14, 2025
Malicious code in awsxten (npm)
- Aug 14, 2025
Malicious code in awsomer (npm)
- Aug 14, 2025
Malicious code in aws-xray-sdk-node (npm)
- Aug 14, 2025
Malicious code in aws-ui-runtime (npm)
- Aug 14, 2025
Malicious code in aws-toolkit-cloud9 (npm)
- Aug 14, 2025
Malicious code in aws-secure-zipper (npm)
- Aug 14, 2025
Malicious code in aws-pdk (npm)
- Aug 14, 2025
Malicious code in aws-lambda-authenticator (npm)
- Aug 14, 2025
Malicious code in aws-gulp-tasks (npm)
- Aug 14, 2025
Malicious code in aws-core-vscode (npm)
- Aug 14, 2025
Malicious code in aws-billing-console-angular (npm)
- Aug 14, 2025
Malicious code in aws-async-iam (npm)
- Aug 14, 2025
Malicious code in aws-api-gateway-js-client (npm)
- Aug 14, 2025
Malicious code in awkkoans (npm)
- Aug 14, 2025
Malicious code in awk-web-catch-double-compile (npm)
- Aug 14, 2025
Malicious code in awk-serialize-upsilon-web-yaml (npm)
- Aug 14, 2025
Malicious code in awk-node-decompress-process-fire (npm)
- Aug 14, 2025
Malicious code in awesomeos (npm)
- Aug 14, 2025
Malicious code in awesomec (npm)
- Aug 14, 2025
Malicious code in awesome-icon (npm)
- Aug 14, 2025
Malicious code in await-pavo-glaciology-axios (npm)
- Aug 14, 2025
Malicious code in await-lynx-scripts-superagent (npm)
- Aug 14, 2025
Malicious code in await-error-runtime-wind-gamma (npm)
- Aug 14, 2025
Malicious code in avrtest (npm)
- Aug 14, 2025
Malicious code in avrnetio (npm)
Page 6116 of 7,293