Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/eum-molestiae-corporis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eum-deserunt-deserunt-consectetur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/esse-maiores-facilis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/esse-libero-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/error-temporibus-tenetur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/error-earum-aspernatur-quaerat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-suscipit-assumenda (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-quo-necessitatibus-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-nulla-temporibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-iure-aperiam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-impedit-molestiae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eos-dicta-consequatur-ipsam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/enim-nemo-rem-tempore (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/enim-nam-similique (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/enim-accusamus-repudiandae-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eius-reiciendis-quaerat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eius-officiis-nostrum-nemo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/earum-et-illum-quidem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/earum-dolorum-voluptatem (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eaque-temporibus-fugit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eaque-magnam-deleniti-odio (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/eaque-deserunt-quaerat-maxime (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/ducimus-sint-consectetur-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorum-porro-cum-laborum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorum-at-debitis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloribus-ipsum-aspernatur (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloribus-impedit-dolorum-enim (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloribus-et-ab (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloribus-est-itaque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolores-blanditiis-eveniet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloremque-tenetur-delectus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloremque-placeat-magnam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloremque-numquam-neque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/doloremque-laudantium-itaque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorem-tempore-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorem-recusandae-maxime (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorem-est-perferendis-sunt (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolorem-a-ullam-quos (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolore-velit-magni (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolore-quos-dolor (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolore-debitis-et (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolor-laudantium-blanditiis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolor-consequuntur-inventore-ut (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dolor-adipisci-suscipit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/distinctio-pariatur-esse-dicta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/distinctio-eius-saepe (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/distinctio-ab-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dignissimos-quae-suscipit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dignissimos-inventore-nemo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dicta-nihil-voluptatem (npm)
Page 5193 of 6,667