Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in figurer (npm)
- Aug 14, 2025
Malicious code in figstack (npm)
- Aug 14, 2025
Malicious code in figma-to-streamlit (npm)
- Aug 14, 2025
Malicious code in figma-api-spellcheck (npm)
- Aug 14, 2025
Malicious code in fightly (npm)
- Aug 14, 2025
Malicious code in figcquery (npm)
- Aug 14, 2025
Malicious code in fig-z7u-project (npm)
- Aug 14, 2025
Malicious code in fig-yam-owns (npm)
- Aug 14, 2025
Malicious code in fig-xray-mango-cuoyn (npm)
- Aug 14, 2025
Malicious code in fig-xigua-xray-jdjku (npm)
- Aug 14, 2025
Malicious code in fig-xigua-kiwi-qpeir (npm)
- Aug 14, 2025
Malicious code in fig-wge-project (npm)
- Aug 14, 2025
Malicious code in fig-wasabi-r9if (npm)
- Aug 14, 2025
Malicious code in fig-void-rxui (npm)
- Aug 14, 2025
Malicious code in fig-victor-november-kweva (npm)
- Aug 14, 2025
Malicious code in fig-victor-fx5p (npm)
- Aug 14, 2025
Malicious code in fig-victor-cvjd (npm)
- Aug 14, 2025
Malicious code in fig-vanilla-kcwd (npm)
- Aug 14, 2025
Malicious code in fig-tqy-project (npm)
- Aug 14, 2025
Malicious code in fig-tango-ohla (npm)
- Aug 14, 2025
Malicious code in fig-tangerine-foxtrot-liano (npm)
- Aug 14, 2025
Malicious code in fig-t7l-project (npm)
- Aug 14, 2025
Malicious code in fig-t1g-project (npm)
- Aug 14, 2025
Malicious code in fig-sui-project (npm)
- Aug 14, 2025
Malicious code in fig-spinach-cge0 (npm)
- Aug 14, 2025
Malicious code in fig-sierra-bla6 (npm)
- Aug 14, 2025
Malicious code in fig-rainbow-9z3s (npm)
- Aug 14, 2025
Malicious code in fig-papa-mike-zytmo (npm)
- Aug 14, 2025
Malicious code in fig-papa-date-hvvks (npm)
- Aug 14, 2025
Malicious code in fig-oscar-ilok (npm)
- Aug 14, 2025
Malicious code in fig-orange-vxjw (npm)
- Aug 14, 2025
Malicious code in fig-orange-mango-krqzj (npm)
- Aug 14, 2025
Malicious code in fig-o37-project (npm)
- Aug 14, 2025
Malicious code in fig-mountain-ds9b (npm)
- Aug 14, 2025
Malicious code in fig-mjx-project (npm)
- Aug 14, 2025
Malicious code in fig-mango-lima-uevfl (npm)
- Aug 14, 2025
Malicious code in fig-mango-hubp (npm)
- Aug 14, 2025
Malicious code in fig-mango-4qhu (npm)
- Aug 14, 2025
Malicious code in fig-lima-vanilla-zksua (npm)
- Aug 14, 2025
Malicious code in fig-lima-jtrl (npm)
- Aug 14, 2025
Malicious code in fig-lemon-india-frbia (npm)
- Aug 14, 2025
Malicious code in fig-l1x-project (npm)
- Aug 14, 2025
Malicious code in fig-kiwi-dunl (npm)
- Aug 14, 2025
Malicious code in fig-kilo-imdl (npm)
- Aug 14, 2025
Malicious code in fig-kilo-dloy (npm)
- Aug 14, 2025
Malicious code in fig-juliet-kilo-aasfj (npm)
- Aug 14, 2025
Malicious code in fig-j5o-project (npm)
- Aug 14, 2025
Malicious code in fig-j0p-project (npm)
- Aug 14, 2025
Malicious code in fig-india-ubne (npm)
- Aug 14, 2025
Malicious code in fig-india-owcb (npm)
Page 5581 of 6,634