Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @kollusietea/incidunt-fugit-occaecati-quod (npm)
- Aug 14, 2025
Malicious code in @kollusietea/impedit-id-error-sit (npm)
- Aug 14, 2025
Malicious code in @kollusietea/illum-nostrum-in-exercitationem (npm)
- Aug 14, 2025
Malicious code in @kollusietea/hic-voluptatem-deleniti (npm)
- Aug 14, 2025
Malicious code in @kollusietea/fugit-maiores-repellendus-optio (npm)
- Aug 14, 2025
Malicious code in @kollusietea/fuga-rerum-commodi-debitis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/facere-in-odio (npm)
- Aug 14, 2025
Malicious code in @kollusietea/facere-alias-nobis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/expedita-autem-magnam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/excepturi-aspernatur-quasi (npm)
- Aug 14, 2025
Malicious code in @kollusietea/eveniet-accusamus-qui (npm)
- Aug 14, 2025
Malicious code in @kollusietea/eum-mollitia-itaque-debitis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/est-voluptatem-accusamus-quia (npm)
- Aug 14, 2025
Malicious code in @kollusietea/est-sapiente-omnis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/eos-explicabo-vitae (npm)
- Aug 14, 2025
Malicious code in @kollusietea/eius-eum-tempore (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ducimus-rem-atque-soluta (npm)
- Aug 14, 2025
Malicious code in @kollusietea/doloribus-illo-in (npm)
- Aug 14, 2025
Malicious code in @kollusietea/dolore-sunt-explicabo (npm)
- Aug 14, 2025
Malicious code in @kollusietea/cumque-atque-adipisci (npm)
- Aug 14, 2025
Malicious code in @kollusietea/cumque-accusamus-repudiandae-similique (npm)
- Aug 14, 2025
Malicious code in @kollusietea/cum-ad-aspernatur-ex (npm)
- Aug 14, 2025
Malicious code in @kollusietea/culpa-officiis-nulla (npm)
- Aug 14, 2025
Malicious code in @kollusietea/culpa-odit-vitae (npm)
- Aug 14, 2025
Malicious code in @kollusietea/consequuntur-necessitatibus-consectetur (npm)
- Aug 14, 2025
Malicious code in @kollusietea/consequuntur-nam-tempora-expedita (npm)
- Aug 14, 2025
Malicious code in @kollusietea/consequatur-molestias-et-ratione (npm)
- Aug 14, 2025
Malicious code in @kollusietea/aut-omnis-debitis (npm)
- Aug 14, 2025
Malicious code in @kollusietea/aspernatur-fuga-accusamus-ipsa (npm)
- Aug 14, 2025
Malicious code in @kollusietea/architecto-occaecati-eaque (npm)
- Aug 14, 2025
Malicious code in @kollusietea/architecto-dolores-unde (npm)
- Aug 14, 2025
Malicious code in @kollusietea/animi-nulla-numquam-voluptatibus (npm)
- Aug 14, 2025
Malicious code in @kollusietea/amet-voluptatum-fugit (npm)
- Aug 14, 2025
Malicious code in @kollusietea/amet-error-harum-quibusdam (npm)
- Aug 14, 2025
Malicious code in @kollusietea/aliquam-eum-odio-maiores (npm)
- Aug 14, 2025
Malicious code in @kollusietea/alias-aperiam-laudantium-error (npm)
- Aug 14, 2025
Malicious code in @kollusietea/adipisci-rem-distinctio-dicta (npm)
- Aug 14, 2025
Malicious code in @kollusietea/adipisci-labore-id (npm)
- Aug 14, 2025
Malicious code in @kollusietea/ad-commodi-temporibus-ex (npm)
- Aug 14, 2025
Malicious code in @kollusietea/accusamus-consectetur-aliquid-perferendis (npm)
- Aug 14, 2025
Malicious code in @kollorg/occaecati-maiores (npm)
- Aug 14, 2025
Malicious code in @kollorg/molestias-asperiores (npm)
- Aug 14, 2025
Malicious code in @kollorg/modi-fugit-accusantium (npm)
- Aug 14, 2025
Malicious code in @kollorg/architecto-omnis (npm)
- Aug 14, 2025
Malicious code in @kollorg/aliquam-soluta (npm)
- Aug 14, 2025
Malicious code in @kollorg/aliquam-quae-natus (npm)
- Aug 14, 2025
Malicious code in @kollorg/aliquam-error (npm)
- Aug 14, 2025
Malicious code in @kollorg/a-ducimus (npm)
- Aug 14, 2025
Malicious code in @kms-types/config (npm)
- Aug 14, 2025
Malicious code in @kiicodeproject/scraper (npm)
Page 5176 of 6,668