Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in agitable (npm)
- Aug 14, 2025
Malicious code in agileos (npm)
- Aug 14, 2025
Malicious code in agifbaig (npm)
- Aug 14, 2025
Malicious code in agetur (npm)
- Aug 14, 2025
Malicious code in agentbox (npm)
- Aug 14, 2025
Malicious code in agenelle (npm)
- Aug 14, 2025
Malicious code in agendars (npm)
- Aug 14, 2025
Malicious code in agendar (npm)
- Aug 14, 2025
Malicious code in agenbola (npm)
- Aug 14, 2025
Malicious code in agen-sbobet (npm)
- Aug 14, 2025
Malicious code in agatha (npm)
- Aug 14, 2025
Malicious code in agate-build (npm)
- Aug 14, 2025
Malicious code in afwzctxndqmrluvi (npm)
- Aug 14, 2025
Malicious code in after-time (npm)
- Aug 14, 2025
Malicious code in afronosh (npm)
- Aug 14, 2025
Malicious code in afrasa (npm)
- Aug 14, 2025
Malicious code in afondevi-generator-api-cli (npm)
- Aug 14, 2025
Malicious code in afisha-logger (npm)
- Aug 14, 2025
Malicious code in afisha-config (npm)
- Aug 14, 2025
Malicious code in afisha-ab-configurator (npm)
- Aug 14, 2025
Malicious code in afifcapcut112tea (npm)
- Aug 14, 2025
Malicious code in afifaljafari112tea (npm)
- Aug 14, 2025
Malicious code in afglobal (npm)
- Aug 14, 2025
Malicious code in affirm-assets (npm)
- Aug 14, 2025
Malicious code in affinegap (npm)
- Aug 14, 2025
Malicious code in afficheur (npm)
- Aug 14, 2025
Malicious code in affectv (npm)
- Aug 14, 2025
Malicious code in aeynrshfkolcvpjq (npm)
- Aug 14, 2025
Malicious code in aetherlog (npm)
- Aug 14, 2025
Malicious code in aether-rollup-triton-fetch (npm)
- Aug 14, 2025
Malicious code in aestest (npm)
- Aug 14, 2025
Malicious code in aertcuhmnpkyqxjf (npm)
- Aug 14, 2025
Malicious code in aerisjs (npm)
- Aug 14, 2025
Malicious code in aeqbdkzxvsthfuoc (npm)
- Aug 14, 2025
Malicious code in aedmapper (npm)
- Aug 14, 2025
Malicious code in adyen-cse-js-2mundos (npm)
- Aug 14, 2025
Malicious code in adyaxtest (npm)
- Aug 14, 2025
Malicious code in adwebsite (npm)
- Aug 14, 2025
Malicious code in advertiser-module (npm)
- Aug 14, 2025
Malicious code in advertapp (npm)
- Aug 14, 2025
Malicious code in adv-web-publishing-assignment-2 (npm)
- Aug 14, 2025
Malicious code in AdultJS (npm)
- Aug 14, 2025
Malicious code in adueband (npm)
- Aug 14, 2025
Malicious code in adthukqreywxibln (npm)
- Aug 14, 2025
Malicious code in adsdk (npm)
- Aug 14, 2025
Malicious code in adrum (npm)
- Aug 14, 2025
Malicious code in adroper (npm)
- Aug 14, 2025
Malicious code in adril7122 (npm)
- Aug 14, 2025
Malicious code in adrenline (npm)
- Aug 14, 2025
Malicious code in adp.ds.ui.actionbar (npm)
Page 6138 of 7,293