Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fitrpg (npm)
- Aug 14, 2025
Malicious code in fitri-martabak25-kuki (npm)
- Aug 14, 2025
Malicious code in fitri-mangut59-breki (npm)
- Aug 14, 2025
Malicious code in fitri-kupat83-kuki (npm)
- Aug 14, 2025
Malicious code in fitri-kentang19-sukiwir (npm)
- Aug 14, 2025
Malicious code in fitools (npm)
- Aug 14, 2025
Malicious code in fispatch (npm)
- Aug 14, 2025
Malicious code in fiskal (npm)
- Aug 14, 2025
Malicious code in fishutils (npm)
- Aug 14, 2025
Malicious code in fishtally (npm)
- Aug 14, 2025
Malicious code in fis3-lint-eslint-umu (npm)
- Aug 14, 2025
Malicious code in fis-rgs (npm)
- Aug 14, 2025
Malicious code in fis-postpackager-zseajs (npm)
- Aug 14, 2025
Malicious code in fis-msprd-react-build (npm)
- Aug 14, 2025
Malicious code in firtstan (npm)
- Aug 14, 2025
Malicious code in firstzf (npm)
- Aug 14, 2025
Malicious code in firstror (npm)
- Aug 14, 2025
Malicious code in firstgold (npm)
- Aug 14, 2025
Malicious code in firstgem (npm)
- Aug 14, 2025
Malicious code in first-val (npm)
- Aug 14, 2025
Malicious code in firpsm (npm)
- Aug 14, 2025
Malicious code in fireworks_mhejg_v4mk1_zephyr (npm)
- Aug 14, 2025
Malicious code in fireworks_9alox_mb1vn_giraffe (npm)
- Aug 14, 2025
Malicious code in firewind (npm)
- Aug 14, 2025
Malicious code in firetaxi (npm)
- Aug 14, 2025
Malicious code in firestore-stripe-invoices (npm)
- Aug 14, 2025
Malicious code in firelines (npm)
- Aug 14, 2025
Malicious code in fireforos (npm)
- Aug 14, 2025
Malicious code in firefly_xl1o4_yet5h_giraffe (npm)
- Aug 14, 2025
Malicious code in firefly_unlcj_d3ftd_xenon (npm)
- Aug 14, 2025
Malicious code in firefly_u1w0u_6tjog_nebula (npm)
- Aug 14, 2025
Malicious code in firefly_h2i0v_z7sya_underworld (npm)
- Aug 14, 2025
Malicious code in firefly_efov4_bncl0_quiver (npm)
- Aug 14, 2025
Malicious code in firefly_drm5y_12h6d_voyage (npm)
- Aug 14, 2025
Malicious code in firefly_2jzh6_bngzi_bloom (npm)
- Aug 14, 2025
Malicious code in fireboard (npm)
- Aug 14, 2025
Malicious code in firebase-queue-client (npm)
- Aug 14, 2025
Malicious code in firebase-io-taurus-procyon (npm)
- Aug 14, 2025
Malicious code in firebase-babel-apollo-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in fireasp (npm)
- Aug 14, 2025
Malicious code in fire-new-encode-fire-transpile (npm)
- Aug 14, 2025
Malicious code in fire-good-serialize-process-phi (npm)
- Aug 14, 2025
Malicious code in fire-error-pipe-delta-old (npm)
- Aug 14, 2025
Malicious code in fir-grape-behe (npm)
- Aug 14, 2025
Malicious code in fintrak (npm)
- Aug 14, 2025
Malicious code in finnlet-topbar-minimal (npm)
- Aug 14, 2025
Malicious code in finnlet-topbar (npm)
- Aug 14, 2025
Malicious code in finnlet-footer (npm)
- Aug 14, 2025
Malicious code in finnbrain (npm)
- Aug 14, 2025
Malicious code in finn-lib-supported-platforms (npm)
Page 5579 of 6,634