Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fluogas (npm)
- Aug 14, 2025
Malicious code in fluidsale (npm)
- Aug 14, 2025
Malicious code in fluidapp (npm)
- Aug 14, 2025
Malicious code in flowreferencewallet (npm)
- Aug 14, 2025
Malicious code in FlowerPassword (npm)
- Aug 14, 2025
Malicious code in flowcrypt-browser (npm)
- Aug 14, 2025
Malicious code in flow_trigger_connector (npm)
- Aug 14, 2025
Malicious code in flow_actions_connector (npm)
- Aug 14, 2025
Malicious code in flow_action_connector (npm)
- Aug 14, 2025
Malicious code in flourish-voyage-xlb743-project (npm)
- Aug 14, 2025
Malicious code in floradex (npm)
- Aug 14, 2025
Malicious code in flora-naeki-0irjp-moondust-project (npm)
- Aug 14, 2025
Malicious code in flora-jb63s-o00ps-bramble-project (npm)
- Aug 14, 2025
Malicious code in flora-hcyw7-r1b7b-universe-project (npm)
- Aug 14, 2025
Malicious code in flora-7i74l-oef07-yonder-project (npm)
- Aug 14, 2025
Malicious code in flora-6evw8-5gm76-indigo-project (npm)
- Aug 14, 2025
Malicious code in flora-5qrg4-9lwo2-dawn-project (npm)
- Aug 14, 2025
Malicious code in flora-59pn3-0lvp9-keystone-project (npm)
- Aug 14, 2025
Malicious code in flora-3mdfo-zp4v0-iceberg-project (npm)
- Aug 14, 2025
Malicious code in floor7js (npm)
- Aug 14, 2025
Malicious code in flockulick (npm)
1 compromised version
- Aug 14, 2025
Malicious code in float-module-export-encode-parse (npm)
- Aug 14, 2025
Malicious code in flipcup (npm)
- Aug 14, 2025
Malicious code in flickr-view (npm)
- Aug 14, 2025
Malicious code in flickr-photo-brick (npm)
- Aug 14, 2025
Malicious code in flexiweb (npm)
- Aug 14, 2025
Malicious code in flexishow (npm)
- Aug 14, 2025
Malicious code in flex-config (npm)
- Aug 14, 2025
Malicious code in fleet.vimcar.com (npm)
- Aug 14, 2025
Malicious code in fleebee (npm)
- Aug 14, 2025
Malicious code in flc4yn (npm)
- Aug 14, 2025
Malicious code in flbtznmirqpweyxh (npm)
- Aug 14, 2025
Malicious code in flaw-m18 (npm)
- Aug 14, 2025
Malicious code in flatmap-stream (npm)
- Aug 14, 2025
Malicious code in flatchr (npm)
- Aug 14, 2025
Malicious code in flat-glob (npm)
- Aug 14, 2025
Malicious code in flaskplay (npm)
- Aug 14, 2025
Malicious code in flasknado (npm)
- Aug 14, 2025
Malicious code in flaskbase (npm)
- Aug 14, 2025
Malicious code in flashsort (npm)
- Aug 14, 2025
Malicious code in flashseo (npm)
- Aug 14, 2025
Malicious code in flashpro (npm)
- Aug 14, 2025
Malicious code in flashcap (npm)
- Aug 14, 2025
Malicious code in flashbaq (npm)
- Aug 14, 2025
Malicious code in flash-list (npm)
- Aug 14, 2025
Malicious code in flare_j98at_gzsii_boulder (npm)
- Aug 14, 2025
Malicious code in flare_eyuhh_d4qrp_thunder (npm)
- Aug 14, 2025
Malicious code in flare_af1ps_oxuv6_fern (npm)
- Aug 14, 2025
Malicious code in flare-xenon-1tkh (npm)
- Aug 14, 2025
Malicious code in flare-ugli-vxl9 (npm)
Page 5577 of 6,634