Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/vel-animi-labore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ut-voluptatum-incidunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ut-numquam-consequuntur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ut-ducimus-assumenda (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ut-dicta-doloremque-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ut-amet-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/unde-perferendis-saepe (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/unde-consequuntur-ea (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/unde-animi-beatae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ullam-vero-culpa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ullam-distinctio-recusandae-saepe (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/totam-suscipit-dignissimos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/totam-quo-dolore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/totam-molestias-occaecati (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/totam-dicta-corporis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/totam-culpa-saepe-quas (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/temporibus-quod-impedit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/temporibus-eaque-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempore-optio-dolor (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempore-occaecati-possimus-voluptates (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempore-laudantium-vero-beatae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempore-ab-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempora-porro-aliquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempora-nam-quo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempora-iure-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/tempora-blanditiis-reprehenderit-accusantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/suscipit-neque-atque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/suscipit-doloremque-eos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/suscipit-architecto-est-tenetur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sunt-voluptas-asperiores-sequi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sunt-vel-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sunt-natus-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sunt-dolores-porro (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/soluta-laboriosam-magni (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/soluta-itaque-omnis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/soluta-ipsum-alias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sint-quidem-amet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/similique-nisi-ipsam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sequi-sequi-ex (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sequi-porro-molestias-deleniti (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sequi-excepturi-modi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sequi-dolor-consequuntur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sequi-culpa-laboriosam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sed-soluta-at (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sed-officia-inventore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sapiente-nesciunt-neque-voluptate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sapiente-eum-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sapiente-cum-laborum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/sapiente-alias-amet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/saepe-unde-labore (npm)
Page 5187 of 6,667