Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in iuythdjfghgff (npm)
- Aug 14, 2025
Malicious code in iunxtio (npm)
- Aug 14, 2025
Malicious code in iunnoman (npm)
- Aug 14, 2025
Malicious code in itwsii (npm)
- Aug 14, 2025
Malicious code in itwd-icons (npm)
- Aug 14, 2025
Malicious code in itvrepo (npm)
- Aug 14, 2025
Malicious code in itsorits (npm)
- Aug 14, 2025
Malicious code in itprod (npm)
- Aug 14, 2025
Malicious code in itmoah (npm)
4 compromised versions
- Aug 14, 2025
Malicious code in ithemes (npm)
- Aug 14, 2025
Malicious code in itemsound (npm)
- Aug 14, 2025
Malicious code in itembuyer (npm)
- Aug 14, 2025
Malicious code in itelepass (npm)
- Aug 14, 2025
Malicious code in itdart (npm)
- Aug 14, 2025
Malicious code in itbank (npm)
- Aug 14, 2025
Malicious code in isvalidelectroneumaddress (npm)
- Aug 14, 2025
Malicious code in isv-upx-client (npm)
- Aug 14, 2025
Malicious code in isv-buc-utils (npm)
- Aug 14, 2025
Malicious code in isv-buc-client (npm)
- Aug 14, 2025
Malicious code in istanbus (npm)
- Aug 14, 2025
Malicious code in issuancemanagementserv (npm)
- Aug 14, 2025
Malicious code in issuancehistoryserv (npm)
- Aug 14, 2025
Malicious code in issaiko (npm)
- Aug 14, 2025
Malicious code in isover (npm)
- Aug 14, 2025
Malicious code in isotope_zudyp_nn07o_solstice (npm)
- Aug 14, 2025
Malicious code in isotope_yyrj0_mwgxs_quiver (npm)
- Aug 14, 2025
Malicious code in isotope_umtwr_vc4uq_whisper (npm)
- Aug 14, 2025
Malicious code in isotope_n82ie_zixw6_serenade (npm)
- Aug 14, 2025
Malicious code in isotope_m0omj_qdafl_night (npm)
- Aug 14, 2025
Malicious code in isotope_lznzo_g55ay_zenith (npm)
- Aug 14, 2025
Malicious code in isotope_7cbky_d6dcc_ocean (npm)
- Aug 14, 2025
Malicious code in isotope_6am4g_corpc_phoenix (npm)
- Aug 14, 2025
Malicious code in isotope_3pyse_l3m1i_xylophone (npm)
- Aug 14, 2025
Malicious code in isotope-webhooks (npm)
- Aug 14, 2025
Malicious code in isotope-dev (npm)
- Aug 14, 2025
Malicious code in isotemplate (npm)
- Aug 14, 2025
Malicious code in isostasy-sirius-eventhoriz-run-script (npm)
- Aug 14, 2025
Malicious code in isostasy-morgan-unuk-loglevel (npm)
- Aug 14, 2025
Malicious code in isostasy-hawkingradiation-pegasus-axios (npm)
- Aug 14, 2025
Malicious code in isoscatr (npm)
- Aug 14, 2025
Malicious code in isolcss (npm)
- Aug 14, 2025
Malicious code in isohill (npm)
- Aug 14, 2025
Malicious code in islands-promo (npm)
- Aug 14, 2025
Malicious code in islands-codestyle (npm)
- Aug 14, 2025
Malicious code in island_izpwg_um9xj_xylophone (npm)
- Aug 14, 2025
Malicious code in island_gkd44_dvr2v_illusion (npm)
- Aug 14, 2025
Malicious code in island_g2gzs_j69zv_yacht (npm)
- Aug 14, 2025
Malicious code in island-yak-gav530-project (npm)
- Aug 14, 2025
Malicious code in island-xerus-fev101-project (npm)
- Aug 14, 2025
Malicious code in island-vzo41-veekc-kelp-project (npm)
Page 5522 of 6,634