Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/molestias-quos-delectus-totam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/molestias-praesentium-corporis-dignissimos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/molestias-laudantium-aliquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/molestiae-nam-voluptate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/modi-culpa-amet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/modi-aliquid-minus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/minima-vero-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/maxime-nisi-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/maxime-illo-non (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/maxime-eaque-modi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/maiores-vero-voluptate-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magni-voluptates-quibusdam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magni-explicabo-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magnam-sit-aut-recusandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magnam-exercitationem-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magnam-amet-recusandae-optio (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/magnam-accusamus-pariatur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/libero-pariatur-occaecati (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/libero-nihil-perspiciatis-accusamus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/libero-molestiae-unde (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/libero-earum-non (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/libero-autem-consequatur-eligendi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laudantium-placeat-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laudantium-laboriosam-placeat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laudantium-labore-sed (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laudantium-in-pariatur-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laudantium-in-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laborum-quos-iure (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laborum-qui-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laborum-excepturi-provident (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laboriosam-tempora-officia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/laboriosam-sed-earum-aut (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/iure-voluptate-harum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/iure-numquam-deleniti (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/iure-eius-sint (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/itaque-possimus-dolorem-fuga (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/itaque-corrupti-id (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/itaque-amet-quo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsum-doloremque-iure (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsam-quo-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsam-optio-cumque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsam-officia-cum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsam-minus-ipsam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsa-dolorum-numquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ipsa-a-nihil (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/inventore-ea-iure (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/incidunt-vel-id (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/in-vel-ea-quod (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/in-repellat-qui (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/in-eligendi-sit (npm)
Page 5191 of 6,667