Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in iris-ue74j-6ofnn-oracle-project (npm)
- Aug 14, 2025
Malicious code in iris-klf5s-q9m49-quill-project (npm)
- Aug 14, 2025
Malicious code in iris-kiwi-bmi271-project (npm)
- Aug 14, 2025
Malicious code in iris-fjord-wdj348-project (npm)
- Aug 14, 2025
Malicious code in iris-e8878-zrte5-labyrinth-project (npm)
- Aug 14, 2025
Malicious code in iris-dandelion-zmt963-project (npm)
- Aug 14, 2025
Malicious code in iris-cloud-ntm849-project (npm)
- Aug 14, 2025
Malicious code in iris-cd611-f1bbs-zen-project (npm)
- Aug 14, 2025
Malicious code in iris-asteroid-mcb936-project (npm)
- Aug 14, 2025
Malicious code in iris-7sth0-wdjq6-moonlight-project (npm)
- Aug 14, 2025
Malicious code in iris-7cmmq-sgta5-yarn-project (npm)
- Aug 14, 2025
Malicious code in iris-4bgmc-7zm3t-nova-project (npm)
- Aug 14, 2025
Malicious code in iris-46nms-0q2tk-song-project (npm)
- Aug 14, 2025
Malicious code in iris-3rsqa-g5lty-kelp-project (npm)
- Aug 14, 2025
Malicious code in iris-2qmor-i4x6n-raven-project (npm)
- Aug 14, 2025
Malicious code in ireflex (npm)
- Aug 14, 2025
Malicious code in ircpybots (npm)
- Aug 14, 2025
Malicious code in irce-server (npm)
- Aug 14, 2025
Malicious code in ircaddon (npm)
- Aug 14, 2025
Malicious code in irator (npm)
- Aug 14, 2025
Malicious code in iqfight (npm)
- Aug 14, 2025
Malicious code in iqboxy-api (npm)
- Aug 14, 2025
Malicious code in iq_delivery_recommendations (npm)
- Aug 14, 2025
Malicious code in iq1eqq (npm)
- Aug 14, 2025
Malicious code in ipwnedyou (npm)
- Aug 14, 2025
Malicious code in ipumsir (npm)
- Aug 14, 2025
Malicious code in ips-visual-parse (npm)
- Aug 14, 2025
Malicious code in ipremote (npm)
- Aug 14, 2025
Malicious code in iplanner (npm)
- Aug 14, 2025
Malicious code in ipi-cli (npm)
- Aug 14, 2025
Malicious code in iphttp (npm)
- Aug 14, 2025
Malicious code in iphonegap (npm)
- Aug 14, 2025
Malicious code in iphilia (npm)
- Aug 14, 2025
Malicious code in ipgmail (npm)
- Aug 14, 2025
Malicious code in ipfs-pack (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in ipconv (npm)
- Aug 14, 2025
Malicious code in ipccopy (npm)
- Aug 14, 2025
Malicious code in ipavowels (npm)
- Aug 14, 2025
Malicious code in ipatra (npm)
- Aug 14, 2025
Malicious code in ipadcalc (npm)
- Aug 14, 2025
Malicious code in iothgyksxeuvwlab (npm)
- Aug 14, 2025
Malicious code in iotcdk (npm)
- Aug 14, 2025
Malicious code in iota-style-loader-lepton-cygnus (npm)
- Aug 14, 2025
Malicious code in iota-nu-deploy-delta-epsilon (npm)
- Aug 14, 2025
Malicious code in iota-class-info-phi-code (npm)
- Aug 14, 2025
Malicious code in iota-bootes-kinetic-quasar (npm)
- Aug 14, 2025
Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
- Aug 14, 2025
Malicious code in iota-auth-nebula-transhumanism (npm)
- Aug 14, 2025
Malicious code in iota-aurora-dione-archaeometry (npm)
- Aug 14, 2025
Malicious code in iot-gateway-plugin-rtls (npm)
Page 5524 of 6,634