Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fig-india-mabn (npm)
- Aug 14, 2025
Malicious code in fig-hotel-zssj (npm)
- Aug 14, 2025
Malicious code in fig-hotel-vanilla-tncqg (npm)
- Aug 14, 2025
Malicious code in fig-hotel-lima-pqjez (npm)
- Aug 14, 2025
Malicious code in fig-hotel-iqba (npm)
- Aug 14, 2025
Malicious code in fig-hotel-fpgm (npm)
- Aug 14, 2025
Malicious code in fig-hotel-delta-gtoia (npm)
- Aug 14, 2025
Malicious code in fig-honeydew-oscar-hocrx (npm)
- Aug 14, 2025
Malicious code in fig-h6r-project (npm)
- Aug 14, 2025
Malicious code in fig-golf-papaya-vckwr (npm)
- Aug 14, 2025
Malicious code in fig-golf-hhvz (npm)
- Aug 14, 2025
Malicious code in fig-foxtrot-cvma (npm)
- Aug 14, 2025
Malicious code in fig-ferry-0fki (npm)
- Aug 14, 2025
Malicious code in fig-eg8-project (npm)
- Aug 14, 2025
Malicious code in fig-echo-wyji (npm)
- Aug 14, 2025
Malicious code in fig-echo-mango-puoow (npm)
- Aug 14, 2025
Malicious code in fig-dragonfruit-ak3o (npm)
- Aug 14, 2025
Malicious code in fig-date-uniform-ijmcz (npm)
- Aug 14, 2025
Malicious code in fig-cherry-yejf (npm)
- Aug 14, 2025
Malicious code in fig-charlie-kilo-euejx (npm)
- Aug 14, 2025
Malicious code in fig-bfp-project (npm)
- Aug 14, 2025
Malicious code in fig-bark-difg (npm)
- Aug 14, 2025
Malicious code in fig-b77-project (npm)
- Aug 14, 2025
Malicious code in fig-ato-project (npm)
- Aug 14, 2025
Malicious code in fig-apple-victor-lqfxr (npm)
- Aug 14, 2025
Malicious code in fig-93k-project (npm)
- Aug 14, 2025
Malicious code in fig-49o-project (npm)
- Aug 14, 2025
Malicious code in fig-17u-project (npm)
- Aug 14, 2025
Malicious code in fig-13d-project (npm)
- Aug 14, 2025
Malicious code in fifa-23-points (npm)
- Aug 14, 2025
Malicious code in fiestah (npm)
- Aug 14, 2025
Malicious code in fieldtext (npm)
- Aug 14, 2025
Malicious code in ficlovers (npm)
- Aug 14, 2025
Malicious code in fhstdcelrxinoaju (npm)
- Aug 14, 2025
Malicious code in fgsqlbzkpxkivdce (npm)
- Aug 14, 2025
Malicious code in fgnfgj5 (npm)
- Aug 14, 2025
Malicious code in fgbpcylsztjauxeh (npm)
- Aug 14, 2025
Malicious code in fg-recorder (npm)
- Aug 14, 2025
Malicious code in ffxfx-paypal (npm)
- Aug 14, 2025
Malicious code in fftool (npm)
- Aug 14, 2025
Malicious code in fftiers (npm)
- Aug 14, 2025
Malicious code in ffosrepl (npm)
- Aug 14, 2025
Malicious code in ffmobile (npm)
- Aug 14, 2025
Malicious code in ffiruby (npm)
- Aug 14, 2025
Malicious code in ffhfjhfjhf (npm)
- Aug 14, 2025
Malicious code in ffg-ui (npm)
- Aug 14, 2025
Malicious code in ffg-env (npm)
- Aug 14, 2025
Malicious code in ff4as (npm)
- Aug 14, 2025
Malicious code in ff-db (npm)
- Aug 14, 2025
Malicious code in fetgat (npm)
Page 5582 of 6,634