Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fourcore (npm)
- Aug 14, 2025
Malicious code in fountain_px1yi_lr921_kestrel (npm)
- Aug 14, 2025
Malicious code in fountain_kg0rq_4jiu9_pulse (npm)
- Aug 14, 2025
Malicious code in fountain_hv8dt_s7anh_undertow (npm)
- Aug 14, 2025
Malicious code in fountain_4yxmh_8jh5i_lily (npm)
- Aug 14, 2025
Malicious code in fountain_2rkey_k9gk6_night (npm)
- Aug 14, 2025
Malicious code in foundyou (npm)
- Aug 14, 2025
Malicious code in foundtain (npm)
- Aug 14, 2025
Malicious code in foundation-supervisor-meissa-polaris (npm)
- Aug 14, 2025
Malicious code in foundation-higgs-colors-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in foundation-ariel-canopus-ini (npm)
- Aug 14, 2025
Malicious code in foundation-accretion-indus-cosmiconfig (npm)
- Aug 14, 2025
Malicious code in founda (npm)
- Aug 14, 2025
Malicious code in fotopin (npm)
- Aug 14, 2025
Malicious code in fossdev (npm)
- Aug 14, 2025
Malicious code in fossamail (npm)
- Aug 14, 2025
Malicious code in forumpp (npm)
- Aug 14, 2025
Malicious code in forumpe (npm)
- Aug 14, 2025
Malicious code in fortunka (npm)
- Aug 14, 2025
Malicious code in fortressjs-naked (npm)
- Aug 14, 2025
Malicious code in fortnite-free-vbucks-2023-april-vbucks-fkdz (npm)
- Aug 14, 2025
Malicious code in fortnite-free-v-bucks-april-2023-working-jedkaa (npm)
- Aug 14, 2025
Malicious code in fortitude-server (npm)
- Aug 14, 2025
Malicious code in forscene (npm)
- Aug 14, 2025
Malicious code in fornax-stream-spica-janus (npm)
- Aug 14, 2025
Malicious code in fornax-mantle-brane-nuxtjs (npm)
- Aug 14, 2025
Malicious code in fornax-init-typeorm-bunyan (npm)
- Aug 14, 2025
Malicious code in fornax-graphql-server-wasat (npm)
- Aug 14, 2025
Malicious code in fornax-express-package-metalsmith (npm)
- Aug 14, 2025
Malicious code in fornax-blitz-nuxtjs-spica (npm)
- Aug 14, 2025
Malicious code in fornax-betelgeuse-ichnology-halley (npm)
- Aug 14, 2025
Malicious code in fornax-algol-altair-cosmochemistry (npm)
- Aug 14, 2025
Malicious code in formik.js (npm)
- Aug 14, 2025
Malicious code in formboy (npm)
- Aug 14, 2025
Malicious code in format-text (npm)
- Aug 14, 2025
Malicious code in forkprove (npm)
- Aug 14, 2025
Malicious code in fork-ts-checker-webpack-plugin-v5 (npm)
- Aug 14, 2025
Malicious code in fork-sun-star-bundle-iota (npm)
- Aug 14, 2025
Malicious code in fork-serialize-secure-grid-load (npm)
- Aug 14, 2025
Malicious code in fork-sedna-jupiter-ablation (npm)
- Aug 14, 2025
Malicious code in fork-publish-vega-zenith (npm)
- Aug 14, 2025
Malicious code in fork-kappa-tree-notify-object (npm)
- Aug 14, 2025
Malicious code in fork-daemon-container-wind-boolean (npm)
- Aug 14, 2025
Malicious code in forgot-sent (npm)
- Aug 14, 2025
Malicious code in forge-vscode (npm)
- Aug 14, 2025
Malicious code in forever-bellatrix-chromedriver-stream (npm)
- Aug 14, 2025
Malicious code in forever-astrochemistry-mysql-archaeogenetics (npm)
- Aug 14, 2025
Malicious code in forever-apex-vega-neptune (npm)
- Aug 14, 2025
Malicious code in forest-zenith-rbk381-project (npm)
- Aug 14, 2025
Malicious code in forest-xylophone-xik202-project (npm)
Page 5575 of 6,634