Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in apple-sierra-vckp (npm)
- Aug 14, 2025
Malicious code in apple-rlu-project (npm)
- Aug 14, 2025
Malicious code in apple-raspberry-bakh (npm)
- Aug 14, 2025
Malicious code in apple-quince-hkra (npm)
- Aug 14, 2025
Malicious code in apple-pk0-project (npm)
- Aug 14, 2025
Malicious code in apple-oscar-uttn (npm)
- Aug 14, 2025
Malicious code in apple-orange-banana-kpynd (npm)
- Aug 14, 2025
Malicious code in apple-nrw-project (npm)
- Aug 14, 2025
Malicious code in apple-november-xblr (npm)
- Aug 14, 2025
Malicious code in apple-nectarine-whiskey-tivzq (npm)
- Aug 14, 2025
Malicious code in apple-mike-banana-lzpuo (npm)
- Aug 14, 2025
Malicious code in apple-mike-abvo (npm)
- Aug 14, 2025
Malicious code in apple-mango-yjwr (npm)
- Aug 14, 2025
Malicious code in apple-mango-yam-inhns (npm)
- Aug 14, 2025
Malicious code in apple-mango-quince-wmfae (npm)
- Aug 14, 2025
Malicious code in apple-lrl-project (npm)
- Aug 14, 2025
Malicious code in apple-lemon-oscar-atxoe (npm)
- Aug 14, 2025
Malicious code in apple-kum-project (npm)
- Aug 14, 2025
Malicious code in apple-kangaroo-pj2g (npm)
- Aug 14, 2025
Malicious code in apple-k27-project (npm)
- Aug 14, 2025
Malicious code in apple-india-rtro (npm)
- Aug 14, 2025
Malicious code in apple-india-mdtr (npm)
- Aug 14, 2025
Malicious code in apple-harbor-06we (npm)
- Aug 14, 2025
Malicious code in apple-grape-bjyq (npm)
- Aug 14, 2025
Malicious code in apple-fig-pkxm (npm)
- Aug 14, 2025
Malicious code in apple-fig-india-uecxa (npm)
- Aug 14, 2025
Malicious code in apple-elderberry-rslf (npm)
- Aug 14, 2025
Malicious code in apple-e4v-project (npm)
- Aug 14, 2025
Malicious code in apple-delta-ohyg (npm)
- Aug 14, 2025
Malicious code in apple-date-quince-qnivq (npm)
- Aug 14, 2025
Malicious code in apple-date-hhyd (npm)
- Aug 14, 2025
Malicious code in apple-charlie-ugli-uicpb (npm)
- Aug 14, 2025
Malicious code in apple-carrot-fzlq (npm)
- Aug 14, 2025
Malicious code in apple-bravo-pfsh (npm)
- Aug 14, 2025
Malicious code in apple-3zd-project (npm)
- Aug 14, 2025
Malicious code in apple-2zb-project (npm)
- Aug 14, 2025
Malicious code in appkeys (npm)
- Aug 14, 2025
Malicious code in appeler (npm)
- Aug 14, 2025
Malicious code in appdirect-universal-search (npm)
- Aug 14, 2025
Malicious code in appcompat (npm)
- Aug 14, 2025
Malicious code in appcapsule (npm)
- Aug 14, 2025
Malicious code in apparea (npm)
- Aug 14, 2025
Malicious code in app_profiler (npm)
- Aug 14, 2025
Malicious code in app_name (npm)
- Aug 14, 2025
Malicious code in app8888888888 (npm)
- Aug 14, 2025
Malicious code in app-shell-startpagina (npm)
- Aug 14, 2025
Malicious code in app-seed (npm)
- Aug 14, 2025
Malicious code in app-pulse-style (npm)
- Aug 14, 2025
Malicious code in app-bridge-testing-library (npm)
- Aug 14, 2025
Malicious code in app-bridge-core (npm)
Page 6127 of 7,293