Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fern-hill-pkz349-project (npm)
- Aug 14, 2025
Malicious code in fern-gorilla-mpy966-project (npm)
- Aug 14, 2025
Malicious code in fern-frost-hud075-project (npm)
- Aug 14, 2025
Malicious code in fern-fki7x-thxqi-zenith-project (npm)
- Aug 14, 2025
Malicious code in fern-crystal-urv373-project (npm)
- Aug 14, 2025
Malicious code in fern-buffalo-pii831-project (npm)
- Aug 14, 2025
Malicious code in fern-albatross-yqa640-project (npm)
- Aug 14, 2025
Malicious code in fern-4dcnh-crd0z-essence-project (npm)
- Aug 14, 2025
Malicious code in fern-19e2h-a1mxj-willow-project (npm)
- Aug 14, 2025
Malicious code in fermiparadox-repository-nightwatch-radiometric (npm)
- Aug 14, 2025
Malicious code in fermiparadox-promise-figures-hawkingradiation (npm)
- Aug 14, 2025
Malicious code in fermiparadox-fornax-whitedwarf-fornax (npm)
- Aug 14, 2025
Malicious code in fermion-graviton-sedna-gravity (npm)
- Aug 14, 2025
Malicious code in fennel-ugli-0sb8 (npm)
- Aug 14, 2025
Malicious code in fennel-nutmeg-8lcy (npm)
- Aug 14, 2025
Malicious code in fennel-moat-he2z (npm)
- Aug 14, 2025
Malicious code in fennecfox (npm)
- Aug 14, 2025
Malicious code in fenlaz (npm)
- Aug 14, 2025
Malicious code in fenghf (npm)
- Aug 14, 2025
Malicious code in fengche (npm)
- Aug 14, 2025
Malicious code in felectron (npm)
- Aug 14, 2025
Malicious code in feedtojs (npm)
- Aug 14, 2025
Malicious code in feedcal (npm)
- Aug 14, 2025
Malicious code in fedfujhyk (npm)
- Aug 14, 2025
Malicious code in fed.m-xpack (npm)
- Aug 14, 2025
Malicious code in feclient (npm)
- Aug 14, 2025
Malicious code in febalist-gulp (npm)
- Aug 14, 2025
Malicious code in feature.genrator (npm)
- Aug 14, 2025
Malicious code in feathur (npm)
- Aug 14, 2025
Malicious code in feathers-protectpay (npm)
- Aug 14, 2025
Malicious code in feathers-credstash (npm)
- Aug 14, 2025
Malicious code in feathers-amqp-events (npm)
- Aug 14, 2025
Malicious code in fear-core-tasks (npm)
- Aug 14, 2025
Malicious code in fe-state (npm)
- Aug 14, 2025
Malicious code in fe-ops-renderizr-warmup (npm)
- Aug 14, 2025
Malicious code in fe-ops-renderizr-client-fallback (npm)
- Aug 14, 2025
Malicious code in fe-extension (npm)
- Aug 14, 2025
Malicious code in fe-assignment (npm)
- Aug 14, 2025
Malicious code in fe-app-inbox (npm)
- Aug 14, 2025
Malicious code in fdsre3 (npm)
- Aug 14, 2025
Malicious code in fdsafdas (npm)
- Aug 14, 2025
Malicious code in fdgert3 (npm)
- Aug 14, 2025
Malicious code in fdfddfdf (npm)
- Aug 14, 2025
Malicious code in fdaeqmrptxkjuiwc (npm)
- Aug 14, 2025
Malicious code in fd4335 (npm)
- Aug 14, 2025
Malicious code in fcsquare (npm)
- Aug 14, 2025
Malicious code in fcrxzymdnlaviqeu (npm)
- Aug 14, 2025
Malicious code in fcn-gin-services (npm)
- Aug 14, 2025
Malicious code in fcn-gin-navigation (npm)
- Aug 14, 2025
Malicious code in fcn-gin-components (npm)
Page 5584 of 6,634