Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- Nov 12, 2025
Malicious code in sonic-oihg-mopifc (npm)
- Nov 12, 2025
Malicious code in sonic-oihg-mopfc (npm)
- Nov 12, 2025
Malicious code in sonic-oihg-mofc (npm)
- Nov 12, 2025
Malicious code in sonic-oihg-moc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocneauaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocneamuaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocneaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocneaaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocnaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoerocaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoeroaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoeraca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoeaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-tmoaca (npm)
- Nov 12, 2025
Malicious code in sonic-oig-mopigfc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-mopigafifc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-mopigaffc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-mopigafc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-mopigafaifc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-moigfc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-moifc (npm)
- Nov 12, 2025
Malicious code in sonic-oig-moic (npm)
- Nov 12, 2025
Malicious code in sonic-oig-moc (npm)
- Nov 12, 2025
Malicious code in sonic-kuoig-timeseywaxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuoig-timeseyaxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuoig-timesexa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timeseyxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timeseyaxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timeseyawxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timeseyawaxa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timesexa (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timesex (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-timese (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-times (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-time (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tim (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-ti (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgviavuexe (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgviavuex (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgviavue (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgviavu (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgviav (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgvia (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgvi (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tgv (npm)
- Nov 12, 2025
Malicious code in sonic-kuloig-tg (npm)
- Nov 12, 2025
Malicious code in sonic-kulig-tgviavuexe (npm)
- Nov 12, 2025
Malicious code in sonic-kulig-tgviavue (npm)
- Nov 12, 2025
Malicious code in sonic-kulig-tgviave (npm)
Page 397 of 4,831