Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
241,528 total in npm · sorted newest first- Nov 12, 2025
Malicious code in sonic-kas-ahagafujidha (npm)
- Nov 12, 2025
Malicious code in sonic-kas-ahagafujiafdha (npm)
- Nov 12, 2025
Malicious code in sonic-kas-ahagafuji (npm)
- Nov 12, 2025
Malicious code in sonic-kas-agi (npm)
- Nov 12, 2025
Malicious code in sonic-kas-ag (npm)
- Nov 12, 2025
Malicious code in sonic-kas-aagi (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahigyafao (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahigyafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahgyafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahgfa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahgafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgahfa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgaha (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fgaa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fga (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagiugafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagiufgafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagiufagugafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagiufaggafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagigafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagiafa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fagfa (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-faga (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fag (npm)
- Nov 12, 2025
Malicious code in sonic-kaos-fa (npm)
- Nov 12, 2025
Malicious code in sonic-kag-tvb (npm)
- Nov 12, 2025
Malicious code in sonic-kag-tgvcb (npm)
- Nov 12, 2025
Malicious code in sonic-kag-tgvb (npm)
- Nov 12, 2025
Malicious code in sonic-kag-tgivcb (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigafifafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigafifaafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigaffafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigafafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisigaafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afisgafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afigafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afifoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afiafoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afia (npm)
- Nov 12, 2025
Malicious code in sonic-jos-affoa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafiofijhah (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafiofijahah (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafiofiah (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafiofia (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafiofa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afafia (npm)
- Nov 12, 2025
Malicious code in sonic-jos-afa (npm)
- Nov 12, 2025
Malicious code in sonic-jos-aafia (npm)
- Nov 12, 2025
Malicious code in sonic-ijos-asanuoaf (npm)
Page 402 of 4,831