Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zittertea/dignissimos-harum-sint-alias (npm)
- Aug 14, 2025
Malicious code in @zittertea/deleniti-in-aspernatur-aut (npm)
- Aug 14, 2025
Malicious code in @zittertea/delectus-itaque-odio (npm)
- Aug 14, 2025
Malicious code in @zittertea/cupiditate-animi-tenetur-doloribus (npm)
- Aug 14, 2025
Malicious code in @zittertea/cupiditate-ad-fuga-minus (npm)
- Aug 14, 2025
Malicious code in @zittertea/consectetur-natus-hic (npm)
- Aug 14, 2025
Malicious code in @zittertea/autem-provident-delectus-libero (npm)
- Aug 14, 2025
Malicious code in @zittertea/architecto-cumque-incidunt (npm)
- Aug 14, 2025
Malicious code in @zittertea/architecto-consectetur-praesentium (npm)
- Aug 14, 2025
Malicious code in @zittertea/aperiam-illo-sed (npm)
- Aug 14, 2025
Malicious code in @zittertea/aliquam-veritatis-corrupti-ipsam (npm)
- Aug 14, 2025
Malicious code in @zittertea/accusantium-ullam-esse (npm)
- Aug 14, 2025
Malicious code in @zittertea/ab-officiis-consequuntur-labore (npm)
- Aug 14, 2025
Malicious code in @zittertea/ab-dolor-optio-sint (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ut (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-us (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-up (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-un (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-um (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ue (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-uc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ua (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ts (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tp (npm)
Page 6144 of 7,293