Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in iostools (npm)
- Aug 14, 2025
Malicious code in iostarter (npm)
- Aug 14, 2025
Malicious code in iossegue (npm)
- Aug 14, 2025
Malicious code in ioslib2 (npm)
- Aug 14, 2025
Malicious code in iosiphone (npm)
- Aug 14, 2025
Malicious code in iosgithub (npm)
- Aug 14, 2025
Malicious code in iosfizmo (npm)
- Aug 14, 2025
Malicious code in ionstudio (npm)
- Aug 14, 2025
Malicious code in ionosphere-promise-vuepress-spectron-webdriver (npm)
- Aug 14, 2025
Malicious code in ionosphere-prettier-plugin-markdown-yonder-chai (npm)
- Aug 14, 2025
Malicious code in ionosphere-cryptography-quasar-radioastronomy (npm)
- Aug 14, 2025
Malicious code in ionicfb (npm)
- Aug 14, 2025
Malicious code in ioniccrd (npm)
- Aug 14, 2025
Malicious code in ion-lsp-server (npm)
- Aug 14, 2025
Malicious code in iomeme (npm)
- Aug 14, 2025
Malicious code in iomarks (npm)
- Aug 14, 2025
Malicious code in iodash (npm)
- Aug 14, 2025
Malicious code in iobroker.tr-064-community (npm)
- Aug 14, 2025
Malicious code in iobroker.covid-19 (npm)
- Aug 14, 2025
Malicious code in iobeam (npm)
- Aug 14, 2025
Malicious code in io-umbriel-betelgeuse-chakra-ui (npm)
- Aug 14, 2025
Malicious code in io-nextjs-loopback-blitz (npm)
- Aug 14, 2025
Malicious code in io-ini-antares-radiometric (npm)
- Aug 14, 2025
Malicious code in io-despina-crust-brane (npm)
- Aug 14, 2025
Malicious code in inwentarz (npm)
- Aug 14, 2025
Malicious code in invoicingserv (npm)
- Aug 14, 2025
Malicious code in invoiceserv (npm)
- Aug 14, 2025
Malicious code in invoicepy (npm)
- Aug 14, 2025
Malicious code in inventory-models (npm)
- Aug 14, 2025
Malicious code in invenio (npm)
- Aug 14, 2025
Malicious code in introtor (npm)
- Aug 14, 2025
Malicious code in introspy (npm)
- Aug 14, 2025
Malicious code in introcie (npm)
- Aug 14, 2025
Malicious code in intoprufa (npm)
- Aug 14, 2025
Malicious code in intl-summer-2017 (npm)
- Aug 14, 2025
Malicious code in interstellarmedium-postcss-loader-chromedriver-innercore (npm)
- Aug 14, 2025
Malicious code in interstellarmedium-init-rollup-electron-builder (npm)
- Aug 14, 2025
Malicious code in interstellarmedium-configstore-dotenv-safe-oauth (npm)
- Aug 14, 2025
Malicious code in interstellarmedium-biomimicry-sirius-rimraf (npm)
- Aug 14, 2025
Malicious code in intershop-schematics4 (npm)
- Aug 14, 2025
Malicious code in intershop-schematics (npm)
- Aug 14, 2025
Malicious code in interpret-rain-delta-sed-resolve (npm)
- Aug 14, 2025
Malicious code in internallib_v741 (npm)
- Aug 14, 2025
Malicious code in internal_app (npm)
- Aug 14, 2025
Malicious code in interferometry-seismology-bulma-rigel (npm)
- Aug 14, 2025
Malicious code in interferometry-hyperion-astrophysics-xml (npm)
- Aug 14, 2025
Malicious code in interferometry-europa-run-script-xanthus (npm)
- Aug 14, 2025
Malicious code in interferometry-cluster-hadron-paleoanthropology (npm)
- Aug 14, 2025
Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)
- Aug 14, 2025
Malicious code in interface-signal-encode-authorize-big (npm)
Page 5525 of 6,634