Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @landmineaknpm2/laudantium-tenetur-praesentium (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/laborum-eius-ipsam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/ipsam-soluta-doloremque (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/ipsam-numquam-soluta (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/incidunt-hic-similique (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/impedit-optio-corrupti (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/impedit-nulla-accusamus (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/impedit-nesciunt-sit (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/impedit-neque-vel (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/illum-itaque-dolorem (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/illum-facilis-quaerat (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/illum-a-delectus (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/id-amet-id (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/fugit-perspiciatis-quibusdam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/fugit-cum-delectus (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/facere-voluptatum-a (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/facere-soluta-quod (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/explicabo-rem-facere (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/exercitationem-quos-magni (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/eveniet-ipsum-magni (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/error-similique-assumenda (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/error-optio-quidem (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/ducimus-iure-officiis (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/doloremque-reprehenderit-saepe (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/deserunt-veritatis-voluptas (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/delectus-quibusdam-consequuntur (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/debitis-fugiat-nesciunt (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/cumque-dolore-deserunt (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/cum-enim-eius (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/commodi-sit-reiciendis (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/aut-odio-numquam (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/atque-neque-molestias (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/at-perspiciatis-accusantium (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/aliquid-iste-ipsum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/aliquam-aliquid-error (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/adipisci-sequi-qui (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/accusantium-quaerat-illum (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/ab-autem-tempore (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/a-quia-aspernatur (npm)
- Aug 14, 2025
Malicious code in @landmineaknpm2/a-ducimus-eius (npm)
- Aug 14, 2025
Malicious code in @kollusietea/voluptatum-doloremque-hic-odit (npm)
- Aug 14, 2025
Malicious code in @kollusietea/voluptatum-corrupti-tempore-ipsam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/voluptate-porro-magnam-et (npm)
- Aug 14, 2025
Malicious code in @kollusietea/voluptate-blanditiis-aliquam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/voluptas-eius-esse (npm)
- Aug 14, 2025
Malicious code in @kollusietea/vitae-deserunt-sunt (npm)
- Aug 14, 2025
Malicious code in @kollusietea/vero-fugit-voluptatem-accusamus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/vero-aut-eos (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ut-neque-autem (npm)
- Aug 14, 2025
Malicious code in @kollusietea/unde-eaque-incidunt-fugit (npm)
Page 5174 of 6,668