Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in island-spinach-tehl (npm)
- Aug 14, 2025
Malicious code in island-rf1j2-dz73l-raven-project (npm)
- Aug 14, 2025
Malicious code in island-reef-nhk867-project (npm)
- Aug 14, 2025
Malicious code in island-quokka-u0mv (npm)
- Aug 14, 2025
Malicious code in island-quail-ooy506-project (npm)
- Aug 14, 2025
Malicious code in island-peacock-uhs701-project (npm)
- Aug 14, 2025
Malicious code in island-ntgm1-zymvl-harmony-project (npm)
- Aug 14, 2025
Malicious code in island-nebula-fxk717-project (npm)
- Aug 14, 2025
Malicious code in island-lunar-t7bx (npm)
- Aug 14, 2025
Malicious code in island-koala-ify991-project (npm)
- Aug 14, 2025
Malicious code in island-kapok-xsa8 (npm)
- Aug 14, 2025
Malicious code in island-jj8iw-b2xwb-jade-project (npm)
- Aug 14, 2025
Malicious code in island-icicle-cgg499-project (npm)
- Aug 14, 2025
Malicious code in island-horizon-gsx090-project (npm)
- Aug 14, 2025
Malicious code in island-hedgehog-qvo612-project (npm)
- Aug 14, 2025
Malicious code in island-everglow-wde261-project (npm)
- Aug 14, 2025
Malicious code in island-everest-gde191-project (npm)
- Aug 14, 2025
Malicious code in island-elephant-smh001-project (npm)
- Aug 14, 2025
Malicious code in island-coral-vzt892-project (npm)
- Aug 14, 2025
Malicious code in island-aspen-oki765-project (npm)
- Aug 14, 2025
Malicious code in island-arctic-zmw994-project (npm)
- Aug 14, 2025
Malicious code in island-798ev-2csww-twilight-project (npm)
- Aug 14, 2025
Malicious code in island-6cg1j-kjrhe-throne-project (npm)
- Aug 14, 2025
Malicious code in islamway (npm)
- Aug 14, 2025
Malicious code in ishtiaq (npm)
- Aug 14, 2025
Malicious code in iseage (npm)
- Aug 14, 2025
Malicious code in iscaffold (npm)
- Aug 14, 2025
Malicious code in isabel (npm)
- Aug 14, 2025
Malicious code in is-mlcs (npm)
- Aug 14, 2025
Malicious code in is-jailbreak (npm)
- Aug 14, 2025
Malicious code in ironwasp (npm)
- Aug 14, 2025
Malicious code in ironic (npm)
- Aug 14, 2025
Malicious code in ironfist (npm)
- Aug 14, 2025
Malicious code in ironeye (npm)
- Aug 14, 2025
Malicious code in iron-bem (npm)
- Aug 14, 2025
Malicious code in irma-tumis55-breki (npm)
- Aug 14, 2025
Malicious code in irma-ruwet47-sukiwir (npm)
- Aug 14, 2025
Malicious code in irma-ragi93-breki (npm)
- Aug 14, 2025
Malicious code in irma-keraktelor39-sukiwir (npm)
- Aug 14, 2025
Malicious code in irishfool (npm)
- Aug 14, 2025
Malicious code in iris_rfoep_vb4b8_crystal (npm)
- Aug 14, 2025
Malicious code in iris_o1bot_lp45d_unicorn (npm)
- Aug 14, 2025
Malicious code in iris_dbnpv_2cgaw_solace (npm)
- Aug 14, 2025
Malicious code in iris_2e89x_rkrpt_fern (npm)
- Aug 14, 2025
Malicious code in iris_1rgzu_iul0o_wander (npm)
- Aug 14, 2025
Malicious code in iris-zenith-iyo103-project (npm)
- Aug 14, 2025
Malicious code in iris-yucca-lsx431-project (npm)
- Aug 14, 2025
Malicious code in iris-ys7oy-ayux1-obsidian-project (npm)
- Aug 14, 2025
Malicious code in iris-y2iti-64tpg-zenith-project (npm)
- Aug 14, 2025
Malicious code in iris-xvlcy-eyt04-wander-project (npm)
Page 5523 of 6,634