Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @crabas0npm/dicta-libero-est (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dicta-earum-molestias (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/dicta-aperiam-perferendis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deserunt-vel-rerum-dolores (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deserunt-ut-aliquid (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deserunt-sequi-quas (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deserunt-dolore-illo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deleniti-quisquam-placeat-quia (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/deleniti-ducimus-adipisci (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/delectus-sapiente-quo-harum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/delectus-quas-eum (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/delectus-perferendis-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/delectus-accusantium-nemo (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/debitis-minima-quod (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cumque-maiores-commodi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cumque-impedit-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cumque-dignissimos-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cumque-consequatur-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cumque-architecto-excepturi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cum-perferendis-necessitatibus (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cum-expedita-nam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/cum-cumque-rerum-cupiditate (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/culpa-magnam-omnis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/culpa-fugiat-facere (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/culpa-aperiam-officiis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/corrupti-perferendis-vero (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/corrupti-illo-labore-quasi (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/corporis-voluptatem-distinctio (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequuntur-voluptatum-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequuntur-qui-perferendis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequuntur-ipsum-vero (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequuntur-excepturi-saepe-corrupti (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequuntur-autem-laudantium-vitae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequatur-tempora-suscipit (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consequatur-porro-ducimus-numquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consectetur-unde-quae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/consectetur-tempore-ullam-ipsam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-ut-quisquam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-porro-soluta (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-nisi-doloremque (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-nam-corporis (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-expedita-amet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-eius-sapiente (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/commodi-accusamus-repellat (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/blanditiis-officia-unde (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/blanditiis-iure-voluptates (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/beatae-soluta-tempore-repudiandae (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/autem-cupiditate-amet (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/at-voluptate-minima-ullam (npm)
- Aug 14, 2025
Malicious code in @crabas0npm/at-inventore-vel (npm)
Page 5194 of 6,667