Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in altenberg (npm)
- Aug 14, 2025
Malicious code in altech (npm)
- Aug 14, 2025
Malicious code in altaris (npm)
- Aug 14, 2025
Malicious code in altair-publish-semantic-ui-prompts (npm)
- Aug 14, 2025
Malicious code in altair-prettier-stylelint-mdx-aurora (npm)
- Aug 14, 2025
Malicious code in altair-prettier-node-config-prosthetics (npm)
- Aug 14, 2025
Malicious code in altair-helios-start-sass-loader (npm)
- Aug 14, 2025
Malicious code in alsrep (npm)
- Aug 14, 2025
Malicious code in alpharex (npm)
- Aug 14, 2025
Malicious code in alphard-transhumanism-venus-configstore (npm)
- Aug 14, 2025
Malicious code in alphard-ganymede-xanadu-apollo (npm)
- Aug 14, 2025
Malicious code in alphacore (npm)
- Aug 14, 2025
Malicious code in alpha-zucchini-qshi (npm)
- Aug 14, 2025
Malicious code in alpha-xray-mango-onsij (npm)
- Aug 14, 2025
Malicious code in alpha-xigua-jq3q (npm)
- Aug 14, 2025
Malicious code in alpha-whiskey-gmaf (npm)
- Aug 14, 2025
Malicious code in alpha-watermelon-zulu-rwjvq (npm)
- Aug 14, 2025
Malicious code in alpha-watermelon-hpnx (npm)
- Aug 14, 2025
Malicious code in alpha-victor-honeydew-jvhvu (npm)
- Aug 14, 2025
Malicious code in alpha-vanilla-orange-qoopq (npm)
- Aug 14, 2025
Malicious code in alpha-vanilla-india-dicka (npm)
- Aug 14, 2025
Malicious code in alpha-tau-project (npm)
- Aug 14, 2025
Malicious code in alpha-tango-pwpu (npm)
- Aug 14, 2025
Malicious code in alpha-tangerine-grape-yuxde (npm)
- Aug 14, 2025
Malicious code in alpha-strawberry-whiskey-shbqd (npm)
- Aug 14, 2025
Malicious code in alpha-rqf-project (npm)
- Aug 14, 2025
Malicious code in alpha-quince-iesi (npm)
- Aug 14, 2025
Malicious code in alpha-papa-zucchini-ldemp (npm)
- Aug 14, 2025
Malicious code in alpha-oz5-project (npm)
- Aug 14, 2025
Malicious code in alpha-oscar-aavv (npm)
- Aug 14, 2025
Malicious code in alpha-orange-vplc (npm)
- Aug 14, 2025
Malicious code in alpha-orange-ryxk (npm)
- Aug 14, 2025
Malicious code in alpha-orange-jjww (npm)
- Aug 14, 2025
Malicious code in alpha-november-ogvb (npm)
- Aug 14, 2025
Malicious code in alpha-november-ivsh (npm)
- Aug 14, 2025
Malicious code in alpha-nectarine-hekq (npm)
- Aug 14, 2025
Malicious code in alpha-nb1-project (npm)
- Aug 14, 2025
Malicious code in alpha-lima-ogju (npm)
- Aug 14, 2025
Malicious code in alpha-lima-090t (npm)
- Aug 14, 2025
Malicious code in alpha-lemon-kiwi-ewiak (npm)
- Aug 14, 2025
Malicious code in alpha-kilo-whiskey-glryh (npm)
- Aug 14, 2025
Malicious code in alpha-juliet-ygjk (npm)
- Aug 14, 2025
Malicious code in alpha-jqg-project (npm)
- Aug 14, 2025
Malicious code in alpha-jpx-project (npm)
- Aug 14, 2025
Malicious code in alpha-horseradish-20ha (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-zucchini-dhnsr (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-whiskey-kgxfc (npm)
- Aug 14, 2025
Malicious code in alpha-honeydew-kxxc (npm)
- Aug 14, 2025
Malicious code in alpha-grape-quince-wnoma (npm)
- Aug 14, 2025
Malicious code in alpha-golf-sihv (npm)
Page 6133 of 7,293