Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,774 total in npm · sorted newest first- Nov 12, 2025
Malicious code in sonic-kos-fusg (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fusfog (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fusfg (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fug (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fudvitifagagafyaja (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgo (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgigiafao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgifao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgiafao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgfao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgaigiafao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgahigyiafao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fgahigiafao (npm)
- Nov 12, 2025
Malicious code in sonic-kos-fg (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocneca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocneamuca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocneamuaca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocneamca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocneaca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocnca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerocca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoeroca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoerca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoeca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoca (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tmoc (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tm (npm)
- Nov 12, 2025
Malicious code in sonic-koig-timexa (npm)
- Nov 12, 2025
Malicious code in sonic-koig-timesxa (npm)
- Nov 12, 2025
Malicious code in sonic-koig-timesexa (npm)
- Nov 12, 2025
Malicious code in sonic-koig-timea (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tima (npm)
- Nov 12, 2025
Malicious code in sonic-koig-tim (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnadeaxwqcav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnadeaxav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnadeav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnadeaav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnadav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tnaav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfivfav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfivaffacfav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfivafav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfivacfav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfivaacfav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfifav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacffav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacfav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuacav (npm)
- Nov 12, 2025
Malicious code in sonic-kig-tifuaav (npm)
Page 385 of 4,816