Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
298,306 total in npm · sorted newest first- Sep 10, 2026
Malicious code in familiar_puma_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familylink (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy447 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_cicada_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-red-stoat (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_angelfish-notthedev (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-jade-felidae (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-amethyst-coyote (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_goose_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_ape_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_marsupial_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-aquamarine-unicorn (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_firefly_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_scorpion_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-scarlet-dog (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy463 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy362 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy285 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_limpet_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_firefly_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_kiwi_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_jackal_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_minnow_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_ptarmigan_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_marten_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_hare_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_hippopotamus_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_marlin-appteadev (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_prawn_scarlet-18 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_jaguar_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_porcupine_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_herring_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_finch_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_lynx_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_halibut_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_eel_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_chinchilla_cyan-60 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_bedbug_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-magenta-wildfowl (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallen-merely-hay (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallguys (npm)
1 compromised version
- Sep 10, 2026
Malicious code in false-positive-reddit-rce (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_ant_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-copper-lark (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-gold-limpet (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon_olive-4 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_dove_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falsepositivecheck6969 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_guan_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-olive-pelican (npm)
1 compromised version
Page 3 of 5,967