Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @lbnqduy/automatic-octo-dollop (npm)
- Aug 14, 2025
Malicious code in @lbnqduy/automatic-guacamole (npm)
- Aug 14, 2025
Malicious code in @lbnqduy/animated-octo-enigma (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/voluptatibus-sint-vitae (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/voluptatibus-error-velit (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/voluptates-illum-voluptates (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/vero-ducimus-eveniet (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/veniam-officiis-qui (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/velit-voluptatem-aliquid (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/vel-natus-rerum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/vel-natus-pariatur (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/vel-consectetur-dicta (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/ut-placeat-enim (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/totam-facere-occaecati (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/tenetur-placeat-delectus (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/temporibus-quia-minima (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/temporibus-amet-exercitationem (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/tempore-harum-hic (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/tempore-dolorum-ad (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/sunt-qui-error (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/sunt-amet-illo (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/sint-quidem-sunt (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/sequi-distinctio-aperiam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/repellat-minima-sint (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/rem-hic-eum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/recusandae-et-minima (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quos-et-facilis (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quo-incidunt-et (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quisquam-eveniet-deserunt (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quidem-deserunt-aut (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quia-temporibus-aut (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/quasi-expedita-magni (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/porro-quia-ullam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/placeat-soluta-quis (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/optio-reiciendis-rem (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/officiis-iure-facilis (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/officiis-commodi-sequi (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/numquam-incidunt-optio (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/nostrum-vitae-ad (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/nostrum-in-rem (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/nostrum-aut-laborum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/non-nobis-alias (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/nisi-perferendis-mollitia (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/nesciunt-sunt-libero (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/neque-facere-veniam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/neque-deserunt-ab (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/mollitia-eius-fugit (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/molestiae-vero-earum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/libero-inventore-cupiditate (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/libero-delectus-officiis (npm)
Page 5173 of 6,668