Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/officia-tenetur-nam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officia-quibusdam-praesentium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officia-omnis-laborum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/officia-laudantium-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odit-ullam-incidunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odit-molestiae-sed (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odit-animi-vel (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odio-quas-quidem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odio-exercitationem-dolorem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/odio-aspernatur-necessitatibus-earum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/occaecati-voluptates-eum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/occaecati-eaque-eos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-quisquam-nesciunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-in-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-eos-ipsam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-doloribus-necessitatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-culpa-a (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/numquam-aspernatur-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nulla-repudiandae-consequuntur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nulla-magni-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nulla-illum-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nostrum-pariatur-omnis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nostrum-molestias-accusantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/non-fuga-blanditiis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nobis-reprehenderit-quam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nobis-placeat-esse (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nobis-et-quod (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nobis-deleniti-qui (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nisi-tenetur-vitae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nisi-consectetur-ipsa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nisi-accusantium-modi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nihil-officia-aperiam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nihil-fugiat-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nihil-fuga-vero-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/neque-suscipit-id (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/neque-ex-dolorem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nemo-sapiente-iste (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nemo-natus-dolor-officia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nemo-error-dolore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nemo-amet-autem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/necessitatibus-quo-temporibus-voluptates (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/necessitatibus-quo-eum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/natus-unde-iure (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/natus-temporibus-laborum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/natus-molestiae-quod-non (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/nam-natus-perspiciatis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/mollitia-voluptas-inventore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/mollitia-quasi-et (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/mollitia-cum-occaecati-corporis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/mollitia-consequatur-animi (npm)
Page 5190 of 6,667