Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @kollusietea/totam-necessitatibus-architecto-consectetur (npm)
- Aug 14, 2025
Malicious code in @kollusietea/tempore-eum-illum (npm)
- Aug 14, 2025
Malicious code in @kollusietea/tempore-aliquid-veniam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/suscipit-rerum-corporis-dignissimos (npm)
- Aug 14, 2025
Malicious code in @kollusietea/suscipit-itaque-voluptatibus-odit (npm)
- Aug 14, 2025
Malicious code in @kollusietea/sunt-veniam-ea (npm)
- Aug 14, 2025
Malicious code in @kollusietea/soluta-magni-a-explicabo (npm)
- Aug 14, 2025
Malicious code in @kollusietea/saepe-iure-soluta-facilis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/repudiandae-suscipit-excepturi (npm)
- Aug 14, 2025
Malicious code in @kollusietea/repudiandae-eveniet-dicta (npm)
- Aug 14, 2025
Malicious code in @kollusietea/reprehenderit-repudiandae-consequatur-aliquid (npm)
- Aug 14, 2025
Malicious code in @kollusietea/rem-commodi-occaecati-rerum (npm)
- Aug 14, 2025
Malicious code in @kollusietea/recusandae-eveniet-illum-incidunt (npm)
- Aug 14, 2025
Malicious code in @kollusietea/recusandae-distinctio-facere-sint (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ratione-et-repudiandae (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quis-illo-distinctio-perferendis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quidem-quae-quam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quidem-magni-consequuntur (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quidem-enim-ad-numquam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/qui-dicta-quia (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quasi-vitae-consequatur (npm)
- Aug 14, 2025
Malicious code in @kollusietea/quasi-sapiente-velit (npm)
- Aug 14, 2025
Malicious code in @kollusietea/praesentium-fugiat-praesentium (npm)
- Aug 14, 2025
Malicious code in @kollusietea/perferendis-quas-laborum (npm)
- Aug 14, 2025
Malicious code in @kollusietea/pariatur-voluptatum-sunt (npm)
- Aug 14, 2025
Malicious code in @kollusietea/optio-esse-asperiores-nisi (npm)
- Aug 14, 2025
Malicious code in @kollusietea/officiis-molestiae-eos (npm)
- Aug 14, 2025
Malicious code in @kollusietea/officiis-doloribus-distinctio-repellendus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/non-corrupti-magni (npm)
- Aug 14, 2025
Malicious code in @kollusietea/nobis-corrupti-ipsa-rem (npm)
- Aug 14, 2025
Malicious code in @kollusietea/neque-quae-reiciendis-tempore (npm)
- Aug 14, 2025
Malicious code in @kollusietea/neque-officiis-molestias-a (npm)
- Aug 14, 2025
Malicious code in @kollusietea/neque-earum-tempora-ratione (npm)
- Aug 14, 2025
Malicious code in @kollusietea/nemo-explicabo-illum-soluta (npm)
- Aug 14, 2025
Malicious code in @kollusietea/necessitatibus-quidem-totam-tempora (npm)
- Aug 14, 2025
Malicious code in @kollusietea/necessitatibus-minima-delectus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/nam-eum-vitae-provident (npm)
- Aug 14, 2025
Malicious code in @kollusietea/molestias-maiores-rerum (npm)
- Aug 14, 2025
Malicious code in @kollusietea/molestiae-illo-delectus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/minus-aliquam-odio-autem (npm)
- Aug 14, 2025
Malicious code in @kollusietea/minima-itaque-reiciendis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/magnam-cumque-rem (npm)
- Aug 14, 2025
Malicious code in @kollusietea/magnam-consequuntur-nulla (npm)
- Aug 14, 2025
Malicious code in @kollusietea/libero-sint-voluptates (npm)
- Aug 14, 2025
Malicious code in @kollusietea/laudantium-voluptas-pariatur (npm)
- Aug 14, 2025
Malicious code in @kollusietea/itaque-corrupti-officiis-optio (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ipsam-ducimus-deleniti-quam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ipsa-itaque-repellendus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/inventore-asperiores-sed-eligendi (npm)
- Aug 14, 2025
Malicious code in @kollusietea/incidunt-veniam-maxime-dicta (npm)
Page 5175 of 6,668