Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in flare-testcafe-futurology-subduction (npm)
- Aug 14, 2025
Malicious code in flare-smart-contracts (npm)
- Aug 14, 2025
Malicious code in flare-less-loader-callisto-spectron-webdriver (npm)
- Aug 14, 2025
Malicious code in flare-helicopter-3bkb (npm)
- Aug 14, 2025
Malicious code in flare-elderberry-kufs (npm)
- Aug 14, 2025
Malicious code in flare-delta-dz9g (npm)
- Aug 14, 2025
Malicious code in flappycat (npm)
- Aug 14, 2025
Malicious code in flamsted (npm)
- Aug 14, 2025
Malicious code in flamma (npm)
- Aug 14, 2025
Malicious code in flame-treasure-nsk229-project (npm)
- Aug 14, 2025
Malicious code in flame-mo59h-wujz3-glow-project (npm)
- Aug 14, 2025
Malicious code in flame-fb9wz-y9wkd-crystal-project (npm)
- Aug 14, 2025
Malicious code in flame-awklr-zlaf6-yarn-project (npm)
- Aug 14, 2025
Malicious code in flame-1aq5p-6oszx-xenith-project (npm)
- Aug 14, 2025
Malicious code in flagueinc (npm)
- Aug 14, 2025
Malicious code in flagquizz (npm)
- Aug 14, 2025
Malicious code in flagbuild (npm)
- Aug 14, 2025
Malicious code in fkyroxlucdzbiwav (npm)
- Aug 14, 2025
Malicious code in fkyqbrzjwtnkgdch (npm)
- Aug 14, 2025
Malicious code in fkpblevdrznyjoux (npm)
- Aug 14, 2025
Malicious code in fkmnauybkhjpwdgz (npm)
- Aug 14, 2025
Malicious code in fkkulvetqcjznbow (npm)
- Aug 14, 2025
Malicious code in fkhpldqgubkatcys (npm)
- Aug 14, 2025
Malicious code in fk-cs-dashboards-skill-manager (npm)
- Aug 14, 2025
Malicious code in fk-cs-dashboards-dt-issue-type (npm)
- Aug 14, 2025
Malicious code in fk-cs-dashboards-dt-error-string (npm)
- Aug 14, 2025
Malicious code in fjxsuchnkwaopieg (npm)
- Aug 14, 2025
Malicious code in fjord-vskja-e9xfr-quartz-project (npm)
- Aug 14, 2025
Malicious code in fjord-utopia-ofh506-project (npm)
- Aug 14, 2025
Malicious code in fjord-utopia-kcz091-project (npm)
- Aug 14, 2025
Malicious code in fjord-sunset-xfc483-project (npm)
- Aug 14, 2025
Malicious code in fjord-quilt-ctu468-project (npm)
- Aug 14, 2025
Malicious code in fjord-p4gll-meyw1-meadow-project (npm)
- Aug 14, 2025
Malicious code in fjord-orangutan-ini579-project (npm)
- Aug 14, 2025
Malicious code in fjord-lightning-dxa064-project (npm)
- Aug 14, 2025
Malicious code in fjord-glacier-deb197-project (npm)
- Aug 14, 2025
Malicious code in fjord-fern-ndv172-project (npm)
- Aug 14, 2025
Malicious code in fjord-emerald-tgy084-project (npm)
- Aug 14, 2025
Malicious code in fjord-edrgl-q411u-willow-project (npm)
- Aug 14, 2025
Malicious code in fjord-cfdg2-kufau-reef-project (npm)
- Aug 14, 2025
Malicious code in fjord-cascade-nuy350-project (npm)
- Aug 14, 2025
Malicious code in fjord-axyhv-udbri-hearth-project (npm)
- Aug 14, 2025
Malicious code in fizzler (npm)
- Aug 14, 2025
Malicious code in fixspec (npm)
- Aug 14, 2025
Malicious code in fixpred (npm)
- Aug 14, 2025
Malicious code in fixmetoo (npm)
- Aug 14, 2025
Malicious code in fixico (npm)
- Aug 14, 2025
Malicious code in fivetran-webhook-example-express (npm)
- Aug 14, 2025
Malicious code in fivaldi-template (npm)
- Aug 14, 2025
Malicious code in fitscore (npm)
Page 5578 of 6,634