Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
298,306 total in npm · sorted newest first- Sep 10, 2026
Malicious code in fallen-fallen-web (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_bison_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-teal-panda (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-chocolate-meadowlark (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-orange-camel (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-plum-crayfish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-indigo-cockroach (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcor-datasource-chainer (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-walnut-jpd7 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nutmeg-hw6d (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jade-vpi888-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-horizon-ocd445-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-hill-zyq727-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-horizon-muf992-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-topaz-aes130-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-zenith-ams842-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jade-uhj749-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jasmine-ini080-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-quasar-our901-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallbax (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-oak-526l (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-honey-vid757-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-peacock-evw208-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-quokka-hz3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-xerus-nvx836-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nocturne-tln311-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-meadow-mjg856-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-yambean-1mhv (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-uranium-xyf246-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nautilus-xni459-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-iceberg-g9hh (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-lightning-gxl169-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcor-hapi-demo (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-meadow-btc304-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-moose-wrp793-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-name (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-ubi69-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tumis94-pore (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-dandelion-ozo954-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-almond-8v6v (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-dove-uoi805-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-apache-with-copyleft-dep (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tumis68-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-twilio (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng42-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fakechat (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-emerald-zce370-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-agpl-license (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajitas-notthedevs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fakearray (npm)
1 compromised version
Page 4 of 5,967