Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in idig-onapp (npm)
- Aug 14, 2025
Malicious code in idid-db (npm)
- Aug 14, 2025
Malicious code in idfastq (npm)
- Aug 14, 2025
Malicious code in idexx-spot (npm)
- Aug 14, 2025
Malicious code in identitydocumentserv (npm)
- Aug 14, 2025
Malicious code in identity_cache (npm)
- Aug 14, 2025
Malicious code in identity-frontend-common (npm)
- Aug 14, 2025
Malicious code in identifications (npm)
- Aug 14, 2025
Malicious code in idempotent-json (npm)
- Aug 14, 2025
Malicious code in idelfonso-package (npm)
- Aug 14, 2025
Malicious code in idelfonso-first-npm (npm)
- Aug 14, 2025
Malicious code in ideedz (npm)
- Aug 14, 2025
Malicious code in ideatome (npm)
- Aug 14, 2025
Malicious code in idealmap (npm)
- Aug 14, 2025
Malicious code in ideainvest-component-library (npm)
- Aug 14, 2025
Malicious code in ide-stubs (npm)
1 compromised version
- Aug 14, 2025
Malicious code in idaddon (npm)
- Aug 14, 2025
Malicious code in ida-ubi47-breki (npm)
- Aug 14, 2025
Malicious code in ida-tempe89-breki (npm)
- Aug 14, 2025
Malicious code in ida-teh81-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-tahu92-kuki (npm)
- Aug 14, 2025
Malicious code in ida-sroto52-breki (npm)
- Aug 14, 2025
Malicious code in ida-naget41-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-lapis56-breki (npm)
- Aug 14, 2025
Malicious code in ida-kue29-breki (npm)
- Aug 14, 2025
Malicious code in ida-enting60-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-dodol25-breki (npm)
- Aug 14, 2025
Malicious code in id-cookies (npm)
- Aug 14, 2025
Malicious code in ictvapp (npm)
- Aug 14, 2025
Malicious code in icornr (npm)
- Aug 14, 2025
Malicious code in iconuk (npm)
- Aug 14, 2025
Malicious code in icons-generator (npm)
5 compromised versions
- Aug 14, 2025
Malicious code in iconfont-consumer-paypal (npm)
- Aug 14, 2025
Malicious code in icondepan (npm)
- Aug 14, 2025
Malicious code in icogsci (npm)
- Aug 14, 2025
Malicious code in iclaim (npm)
- Aug 14, 2025
Malicious code in icicle-yucca-jur519-project (npm)
- Aug 14, 2025
Malicious code in icicle-yellow-qva287-project (npm)
- Aug 14, 2025
Malicious code in icicle-waterfall-wix021-project (npm)
- Aug 14, 2025
Malicious code in icicle-utopia-hld871-project (npm)
- Aug 14, 2025
Malicious code in icicle-topaz-ltb727-project (npm)
- Aug 14, 2025
Malicious code in icicle-reef-dyf367-project (npm)
- Aug 14, 2025
Malicious code in icicle-rainbow-akk321-project (npm)
- Aug 14, 2025
Malicious code in icicle-quasar-urh125-project (npm)
- Aug 14, 2025
Malicious code in icicle-myth-xgn480-project (npm)
- Aug 14, 2025
Malicious code in icicle-moon-zdu476-project (npm)
- Aug 14, 2025
Malicious code in icicle-lightning-feb821-project (npm)
- Aug 14, 2025
Malicious code in icicle-leopard-gxz071-project (npm)
- Aug 14, 2025
Malicious code in icicle-koala-yqb603-project (npm)
- Aug 14, 2025
Malicious code in icicle-kaleidoscope-tdl275-project (npm)
Page 5532 of 6,634