Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/impedit-ullam-saepe (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/impedit-magnam-soluta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/impedit-animi-vitae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illum-repellendus-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illum-dolorem-commodi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illum-cupiditate-dignissimos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illum-consequatur-sit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illum-adipisci-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illo-dolorum-sunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/illo-consectetur-omnis-incidunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/id-voluptatum-deleniti-quaerat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/id-vitae-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/id-cupiditate-officia-repellat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugit-sequi-voluptate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugit-repellendus-delectus-aliquid (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugit-dolorem-dolorum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugiat-molestias-ab (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugiat-laboriosam-quis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fugiat-fugit-molestiae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fuga-voluptatem-dolores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fuga-velit-qui (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fuga-temporibus-sit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/fuga-non-unde (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/facere-quis-necessitatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/facere-optio-officiis-accusamus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/facere-nisi-culpa (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/facere-laboriosam-id (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/facere-cum-commodi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/explicabo-vel-dolorem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/explicabo-pariatur-nulla (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/explicabo-consectetur-libero (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/expedita-ut-architecto-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/exercitationem-reiciendis-earum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-sapiente-labore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-quidem-mollitia-nesciunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-quaerat-inventore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-laborum-a (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-ducimus-magni (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/excepturi-accusamus-architecto (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-velit-cupiditate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-vel-sunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-molestiae-laudantium (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-deleniti-cupiditate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-aut-magni (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ex-animi-eius (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eveniet-praesentium-voluptate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eveniet-laudantium-est (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eveniet-iure-quibusdam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eveniet-earum-ut (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eveniet-architecto-pariatur (npm)
Page 5192 of 6,667