Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in interface-sigma-rain-pi-mu (npm)
- Aug 14, 2025
Malicious code in interface-cloud-class-benchmark-debug (npm)
- Aug 14, 2025
Malicious code in interets (npm)
- Aug 14, 2025
Malicious code in intercal (npm)
- Aug 14, 2025
Malicious code in intel_collab (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in intel-ai-assistant-ui (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in integreat-transporter-rabbitmq (npm)
- Aug 14, 2025
Malicious code in integrationkit-nodejs (npm)
- Aug 14, 2025
Malicious code in integration-hub-worker-base (npm)
- Aug 14, 2025
Malicious code in integer-stack-uglify-decrypt-dog (npm)
- Aug 14, 2025
Malicious code in integer-execute-shell-runtime-protected (npm)
- Aug 14, 2025
Malicious code in integer-bad-socket-execute-emulate (npm)
- Aug 14, 2025
Malicious code in intaka (npm)
- Aug 14, 2025
Malicious code in int_worldpay_sfra (npm)
- Aug 14, 2025
Malicious code in int_affirm_sfra (npm)
- Aug 14, 2025
Malicious code in int-lib-config-utils (npm)
1 compromised version
- Aug 14, 2025
Malicious code in instrumentile (npm)
- Aug 14, 2025
Malicious code in instaspot (npm)
- Aug 14, 2025
Malicious code in instantly-asphalt-9-legends-credits-generator (npm)
- Aug 14, 2025
Malicious code in instantly-ark-survival-primal-pass-generator (npm)
- Aug 14, 2025
Malicious code in instance-detect-paypal (npm)
- Aug 14, 2025
Malicious code in installments (npm)
- Aug 14, 2025
Malicious code in install-zenobia-convict-backend (npm)
- Aug 14, 2025
Malicious code in install-paychex-deps (npm)
- Aug 14, 2025
Malicious code in install-module (npm)
- Aug 14, 2025
Malicious code in install-meteor-webdriver-mocha-framework (npm)
- Aug 14, 2025
Malicious code in install-ganymede-avior-morgan (npm)
- Aug 14, 2025
Malicious code in instal (npm)
- Aug 14, 2025
Malicious code in instadown (npm)
- Aug 14, 2025
Malicious code in instacarro-sellers-appointments-api (npm)
- Aug 14, 2025
Malicious code in inspired (npm)
- Aug 14, 2025
Malicious code in insercol (npm)
- Aug 14, 2025
Malicious code in inquizit (npm)
- Aug 14, 2025
Malicious code in innovid-ui (npm)
- Aug 14, 2025
Malicious code in innogames (npm)
- Aug 14, 2025
Malicious code in innocoder (npm)
- Aug 14, 2025
Malicious code in innocms (npm)
- Aug 14, 2025
Malicious code in innobute (npm)
- Aug 14, 2025
Malicious code in inno-pubsub (npm)
- Aug 14, 2025
Malicious code in innmind (npm)
- Aug 14, 2025
Malicious code in innercore-solis-plutology-entanglement (npm)
- Aug 14, 2025
Malicious code in innercore-phoebe-quasar-atlas (npm)
- Aug 14, 2025
Malicious code in innercore-betelgeuse-primatology-auth (npm)
- Aug 14, 2025
Malicious code in injectapp-org-injection-of-apps-and-news900 (npm)
- Aug 14, 2025
Malicious code in init-rest-xenos-fork (npm)
- Aug 14, 2025
Malicious code in init-enceladus-magnetosphere-registry (npm)
- Aug 14, 2025
Malicious code in ini-dactyl-xo-perseus (npm)
- Aug 14, 2025
Malicious code in inhunmi (npm)
- Aug 14, 2025
Malicious code in infrated (npm)
- Aug 14, 2025
Malicious code in infrastructure-lib (npm)
Page 5526 of 6,634