Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
239,899 total in npm · sorted newest first- Jul 13, 2026
Malicious code in nottuff3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff29 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff28 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff27 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in nottuff26 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff24 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff22 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff21 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff20 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff2 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff19 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff18 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff17 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff16 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff14 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff13 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff12 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff11 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff10 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in nottuff1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet20 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet19 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet18 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet17 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet15 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet14 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet13 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden5 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden4 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden29 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden27 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden26 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden25 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden24 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden23 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden2 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in abuden1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in timmytuffknuckles9 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in timmytuffknuckles6 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in timmytuffknuckles3 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in speed5 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in speed3 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in speed2 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in speed1 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in sixseven6 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in sixseven5 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in sixseven4 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in sixseven3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in sixseven2 (npm)
3 compromised versions
Page 5 of 4,798