Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in imezrgkgbudyvzuucbjg0aadho2oir0l (npm)
- Aug 14, 2025
Malicious code in imecon (npm)
- Aug 14, 2025
Malicious code in imdbpro (npm)
- Aug 14, 2025
Malicious code in imd-cloud-orders (npm)
- Aug 14, 2025
Malicious code in imcloud (npm)
- Aug 14, 2025
Malicious code in imagif (npm)
- Aug 14, 2025
Malicious code in imagelink (npm)
- Aug 14, 2025
Malicious code in imagedump (npm)
- Aug 14, 2025
Malicious code in imaged (npm)
- Aug 14, 2025
Malicious code in imagecalc (npm)
- Aug 14, 2025
Malicious code in image_transformations (npm)
- Aug 14, 2025
Malicious code in image-lib (npm)
- Aug 14, 2025
Malicious code in imaf-fixtures (npm)
- Aug 14, 2025
Malicious code in ilxs1q (npm)
- Aug 14, 2025
Malicious code in ilmxzkyhrojgfwcv (npm)
- Aug 14, 2025
Malicious code in illusion_yxjqr_guvw9_ember (npm)
- Aug 14, 2025
Malicious code in illusion_vc0tp_1fp86_paradise (npm)
- Aug 14, 2025
Malicious code in illusion_sirr0_yuxo9_zodiac (npm)
- Aug 14, 2025
Malicious code in illusion_d6ark_5gyai_topaz (npm)
- Aug 14, 2025
Malicious code in illusion_cuzcm_lsk2z_glow (npm)
- Aug 14, 2025
Malicious code in illusion_89muf_zzaa7_fern (npm)
- Aug 14, 2025
Malicious code in illusion_737g5_aqmrb_xenon (npm)
- Aug 14, 2025
Malicious code in illume-luminous-zot917-project (npm)
- Aug 14, 2025
Malicious code in illume-hum-fhb242-project (npm)
- Aug 14, 2025
Malicious code in ilikerun (npm)
- Aug 14, 2025
Malicious code in iletouhkxqfvknwc (npm)
- Aug 14, 2025
Malicious code in ilaaas (npm)
- Aug 14, 2025
Malicious code in ikvqlxtofwbzeknc (npm)
- Aug 14, 2025
Malicious code in ikst (npm)
- Aug 14, 2025
Malicious code in ikregeer (npm)
- Aug 14, 2025
Malicious code in ikoeptgnfzyxcasm (npm)
- Aug 14, 2025
Malicious code in ikizler (npm)
- Aug 14, 2025
Malicious code in ikgnahexlofdpmzt (npm)
- Aug 14, 2025
Malicious code in ikawgpbjdoskrnfl (npm)
- Aug 14, 2025
Malicious code in ijsdqbfxkrgwcazk (npm)
- Aug 14, 2025
Malicious code in ijkgsbnvlowxayfz (npm)
- Aug 14, 2025
Malicious code in iitlab (npm)
- Aug 14, 2025
Malicious code in iinspre (npm)
- Aug 14, 2025
Malicious code in iilinks (npm)
- Aug 14, 2025
Malicious code in ihooker (npm)
- Aug 14, 2025
Malicious code in ihm-js-coral-client (npm)
- Aug 14, 2025
Malicious code in ihfznoakvwluqcpg (npm)
- Aug 14, 2025
Malicious code in ihealthlibrary-react-native (npm)
- Aug 14, 2025
Malicious code in ihbonxreqvcdwuzl (npm)
- Aug 14, 2025
Malicious code in ihavedone (npm)
- Aug 14, 2025
Malicious code in igwutil-yy (npm)
- Aug 14, 2025
Malicious code in igwinit (npm)
- Aug 14, 2025
Malicious code in iguana-xenon-zqq461-project (npm)
- Aug 14, 2025
Malicious code in iguana-whirlpool-mpq809-project (npm)
- Aug 14, 2025
Malicious code in iguana-umbra-khi789-project (npm)
Page 5530 of 6,634