Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in forest-whirlpool-gua248-project (npm)
- Aug 14, 2025
Malicious code in forest-wave-fzd599-project (npm)
- Aug 14, 2025
Malicious code in forest-waterfall-atq265-project (npm)
- Aug 14, 2025
Malicious code in forest-uranium-rdl996-project (npm)
- Aug 14, 2025
Malicious code in forest-rainbow-dbn331-project (npm)
- Aug 14, 2025
Malicious code in forest-quill-znf368-project (npm)
- Aug 14, 2025
Malicious code in forest-quagmire-jun890-project (npm)
- Aug 14, 2025
Malicious code in forest-prairie-itk284-project (npm)
- Aug 14, 2025
Malicious code in forest-mist-wbh282-project (npm)
- Aug 14, 2025
Malicious code in forest-infinity-zqx963-project (npm)
- Aug 14, 2025
Malicious code in forest-hill-oon603-project (npm)
- Aug 14, 2025
Malicious code in forclix (npm)
- Aug 14, 2025
Malicious code in force_webui (npm)
- Aug 14, 2025
Malicious code in fooseapp (npm)
- Aug 14, 2025
Malicious code in foosboom (npm)
- Aug 14, 2025
Malicious code in foonet (npm)
- Aug 14, 2025
Malicious code in foogle (npm)
- Aug 14, 2025
Malicious code in foodswap (npm)
- Aug 14, 2025
Malicious code in foodheat (npm)
- Aug 14, 2025
Malicious code in foodgap (npm)
- Aug 14, 2025
Malicious code in fooddiary (npm)
- Aug 14, 2025
Malicious code in fooda_tweet_fetcher (npm)
- Aug 14, 2025
Malicious code in foo2 (npm)
- Aug 14, 2025
Malicious code in fontcharacter (npm)
- Aug 14, 2025
Malicious code in fontawesome-pro-all (npm)
- Aug 14, 2025
Malicious code in font-scrubber (npm)
- Aug 14, 2025
Malicious code in font-filter (npm)
- Aug 14, 2025
Malicious code in fonemas (npm)
- Aug 14, 2025
Malicious code in fonarikua (npm)
- Aug 14, 2025
Malicious code in fomalhaut-triton-astrometry-jsonp (npm)
- Aug 14, 2025
Malicious code in fomalhaut-deneb-jabbah-achernar (npm)
- Aug 14, 2025
Malicious code in fomalhaut-australis-isostasy-ora (npm)
- Aug 14, 2025
Malicious code in fomalhaut-antares-phenomic-outercore (npm)
- Aug 14, 2025
Malicious code in followers-for-snapchat713 (npm)
- Aug 14, 2025
Malicious code in followers-for-snapchat306 (npm)
- Aug 14, 2025
Malicious code in folksr (npm)
- Aug 14, 2025
Malicious code in foldem (npm)
- Aug 14, 2025
Malicious code in foever (npm)
- Aug 14, 2025
Malicious code in fodash (npm)
- Aug 14, 2025
Malicious code in focusbot (npm)
- Aug 14, 2025
Malicious code in focus-sherlock (npm)
- Aug 14, 2025
Malicious code in foamtree (npm)
- Aug 14, 2025
Malicious code in fnkotbrswpvhigux (npm)
- Aug 14, 2025
Malicious code in fnd-ridgian (npm)
- Aug 14, 2025
Malicious code in fnckrxvsqwkldzgi (npm)
- Aug 14, 2025
Malicious code in fnatural (npm)
- Aug 14, 2025
Malicious code in fn-util (npm)
- Aug 14, 2025
Malicious code in flyteconsole (npm)
- Aug 14, 2025
Malicious code in fluxible.io (npm)
- Aug 14, 2025
Malicious code in fluxbuntu (npm)
Page 5576 of 6,634