Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in iguana-sequoia-pou419-project (npm)
- Aug 14, 2025
Malicious code in iguana-quilt-auy683-project (npm)
- Aug 14, 2025
Malicious code in iguana-quagmire-bsc096-project (npm)
- Aug 14, 2025
Malicious code in iguana-lightning-omh887-project (npm)
- Aug 14, 2025
Malicious code in iguana-koala-rti604-project (npm)
- Aug 14, 2025
Malicious code in iguana-igloo-apj537-project (npm)
- Aug 14, 2025
Malicious code in iguana-ecosystem-iuc520-project (npm)
- Aug 14, 2025
Malicious code in iguana-cascade-inq333-project (npm)
- Aug 14, 2025
Malicious code in iguana-bonfire-ahx736-project (npm)
- Aug 14, 2025
Malicious code in iguana-amber-gbr256-project (npm)
- Aug 14, 2025
Malicious code in igsxneyqtowhzjlv (npm)
- Aug 14, 2025
Malicious code in ignore-doc (npm)
- Aug 14, 2025
Malicious code in ignite-ui-full (npm)
- Aug 14, 2025
Malicious code in ignite-stop-superflare-rate-limiter (npm)
- Aug 14, 2025
Malicious code in ignite-rest-exec-sedimentology (npm)
- Aug 14, 2025
Malicious code in ignite-paleoceanography-lightyear-rimraf (npm)
- Aug 14, 2025
Malicious code in ignite-mira-dione-cz-conventional-changelog (npm)
- Aug 14, 2025
Malicious code in igloo-zenith-pkf567-project (npm)
- Aug 14, 2025
Malicious code in igloo-unicorn-ebi949-project (npm)
- Aug 14, 2025
Malicious code in igloo-pinnacle-uxm771-project (npm)
- Aug 14, 2025
Malicious code in igloo-november-uve9 (npm)
- Aug 14, 2025
Malicious code in igloo-mountain-seb898-project (npm)
- Aug 14, 2025
Malicious code in igloo-mangrove-aim739-project (npm)
- Aug 14, 2025
Malicious code in igloo-jewel-vwx081-project (npm)
- Aug 14, 2025
Malicious code in igloo-dune-rma443-project (npm)
- Aug 14, 2025
Malicious code in igloo-dewdrop-xki089-project (npm)
- Aug 14, 2025
Malicious code in igloo-caravan-rjc896-project (npm)
- Aug 14, 2025
Malicious code in igloo-ant-lua338-project (npm)
- Aug 14, 2025
Malicious code in igamma (npm)
- Aug 14, 2025
Malicious code in ig.gfx.solid (npm)
- Aug 14, 2025
Malicious code in ifunfacts (npm)
- Aug 14, 2025
Malicious code in iftads (npm)
- Aug 14, 2025
Malicious code in ifrtlaxcjygzqenk (npm)
- Aug 14, 2025
Malicious code in iframed (npm)
- Aug 14, 2025
Malicious code in ifm-length (npm)
- Aug 14, 2025
Malicious code in iflix-portal (npm)
- Aug 14, 2025
Malicious code in ifbyphone (npm)
- Aug 14, 2025
Malicious code in iezfumgcxaotnphd (npm)
- Aug 14, 2025
Malicious code in ieubpm (npm)
- Aug 14, 2025
Malicious code in ienroll (npm)
- Aug 14, 2025
Malicious code in iekgzqbacdrwslok (npm)
- Aug 14, 2025
Malicious code in iejgdnlfvpkbcuxa (npm)
- Aug 14, 2025
Malicious code in ieee-mcoe-ts-cordova (npm)
- Aug 14, 2025
Malicious code in idsyao (npm)
- Aug 14, 2025
Malicious code in idshjyvoguaxfpnc (npm)
- Aug 14, 2025
Malicious code in idnpoker (npm)
- Aug 14, 2025
Malicious code in idms-web-components (npm)
- Aug 14, 2025
Malicious code in idlgkxebvqnarmow (npm)
- Aug 14, 2025
Malicious code in idig-solus (npm)
- Aug 14, 2025
Malicious code in idig-openstack (npm)
Page 5531 of 6,634