Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/quis-enim-sunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quis-ducimus-quasi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quis-doloremque-aliquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quis-aliquid-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quidem-optio-minus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quidem-dicta-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quidem-cupiditate-maiores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-voluptatem-mollitia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-velit-beatae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-nisi-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-dolor-corrupti (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-cupiditate-at (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quia-asperiores-modi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/qui-blanditiis-deserunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quasi-enim-optio (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quasi-dignissimos-aspernatur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quasi-animi-maxime-non (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quas-tempore-mollitia-quaerat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quam-veritatis-tenetur-adipisci (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quam-incidunt-consequuntur-alias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quam-autem-dignissimos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quaerat-perferendis-iusto-quis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quaerat-nostrum-quis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quaerat-nesciunt-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-voluptates-sed-veritatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-quos-asperiores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-nobis-ipsa-hic (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-ipsa-inventore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-illo-repellendus-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/quae-harum-assumenda-modi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/provident-modi-enim (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/provident-doloribus-ipsum-recusandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/praesentium-accusamus-ipsa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/possimus-nisi-officia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/possimus-laudantium-facilis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/porro-voluptatibus-veniam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/porro-voluptates-dolores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/porro-debitis-ad (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/placeat-neque-dignissimos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/perspiciatis-odit-veritatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/perferendis-et-laudantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/perferendis-architecto-quaerat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/optio-modi-a-necessitatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/optio-amet-porro (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/omnis-suscipit-dicta-quasi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/omnis-sint-ipsa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/omnis-distinctio-molestiae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officiis-soluta-quos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officiis-sit-facilis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officiis-dolor-non (npm)
Page 5189 of 6,667