Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in infra-kafka-agent (npm)
- Aug 14, 2025
Malicious code in infotree (npm)
- Aug 14, 2025
Malicious code in infocoin (npm)
- Aug 14, 2025
Malicious code in info-sanitize-shell-omicron-thread (npm)
- Aug 14, 2025
Malicious code in info-gamma-eta-xi-cluster (npm)
- Aug 14, 2025
Malicious code in info-export-double-refactor-table (npm)
- Aug 14, 2025
Malicious code in info-compile-cron-rho-export (npm)
- Aug 14, 2025
Malicious code in info-air-monitor-deserialize-bad (npm)
- Aug 14, 2025
Malicious code in inflation-yakutsk-json-perseus (npm)
- Aug 14, 2025
Malicious code in inflation-nova-asteroid-hermes (npm)
- Aug 14, 2025
Malicious code in infinity_yv9q0_sr1ak_quiver (npm)
- Aug 14, 2025
Malicious code in infinity_jxiyh_0eh19_nova (npm)
- Aug 14, 2025
Malicious code in infinity_jbre7_244gf_molecule (npm)
- Aug 14, 2025
Malicious code in infinity_7vg3m_avwx5_yonder (npm)
- Aug 14, 2025
Malicious code in infinity_6njel_jxp8p_vantage (npm)
- Aug 14, 2025
Malicious code in infinity_3pc8h_welvy_voyage (npm)
- Aug 14, 2025
Malicious code in infinity_08wsx_hzyhp_vantage (npm)
- Aug 14, 2025
Malicious code in infinity-xenon-cci996-project (npm)
- Aug 14, 2025
Malicious code in infinity-umbrella-dfb436-project (npm)
- Aug 14, 2025
Malicious code in infinity-sunset-qsh049-project (npm)
- Aug 14, 2025
Malicious code in infinity-river-xpr242-project (npm)
- Aug 14, 2025
Malicious code in infinity-rainbow-lfq530-project (npm)
- Aug 14, 2025
Malicious code in infinity-peacock-qvy720-project (npm)
- Aug 14, 2025
Malicious code in infinity-lightning-lij114-project (npm)
- Aug 14, 2025
Malicious code in infinity-iceberg-pxa717-project (npm)
- Aug 14, 2025
Malicious code in infinity-aspen-ikd431-project (npm)
- Aug 14, 2025
Malicious code in inferno-zest-3vjl (npm)
- Aug 14, 2025
Malicious code in inferno-zeppelin-po2r (npm)
- Aug 14, 2025
Malicious code in inferno-yacht-pcs1 (npm)
- Aug 14, 2025
Malicious code in inferno-titan-4nsz (npm)
- Aug 14, 2025
Malicious code in inferno-helicopter-l4v2 (npm)
- Aug 14, 2025
Malicious code in inferno-eagle-i75z (npm)
- Aug 14, 2025
Malicious code in inferno-deciduous-eykx (npm)
- Aug 14, 2025
Malicious code in infamy (npm)
- Aug 14, 2025
Malicious code in inexor-tree (npm)
- Aug 14, 2025
Malicious code in inengine (npm)
- Aug 14, 2025
Malicious code in ineldua (npm)
- Aug 14, 2025
Malicious code in industr (npm)
- Aug 14, 2025
Malicious code in indus-xerxes-hermes-electron (npm)
- Aug 14, 2025
Malicious code in indus-postgres-avior-node-config (npm)
- Aug 14, 2025
Malicious code in indus-io-prettier-stylelint-cygnus (npm)
- Aug 14, 2025
Malicious code in indizio (npm)
- Aug 14, 2025
Malicious code in indigo_z3u10_4rpwx_vista (npm)
- Aug 14, 2025
Malicious code in indigo_vfsca_sg7uv_willow (npm)
- Aug 14, 2025
Malicious code in indigo_rgiqq_vnnwe_glacier (npm)
- Aug 14, 2025
Malicious code in indigo_qzrd8_rr7y6_driftwood (npm)
- Aug 14, 2025
Malicious code in indigo_atzug_mqey4_lunar (npm)
- Aug 14, 2025
Malicious code in indigo_02i5p_kkrqj_xylophone (npm)
- Aug 14, 2025
Malicious code in indigo-wbimi-zf1d4-vortex-project (npm)
- Aug 14, 2025
Malicious code in indigo-lrk6k-y1ei4-nova-project (npm)
Page 5527 of 6,634