Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fcn-gin-cards (npm)
- Aug 14, 2025
Malicious code in fcmrqltxghvoujks (npm)
- Aug 14, 2025
Malicious code in fcimport (npm)
- Aug 14, 2025
Malicious code in fca-zyx (npm)
- Aug 14, 2025
Malicious code in fca-zour-qlam (npm)
- Aug 14, 2025
Malicious code in fca-zour (npm)
- Aug 14, 2025
Malicious code in fca-zeus-tan (npm)
- Aug 14, 2025
Malicious code in fca-zera-remake (npm)
- Aug 14, 2025
Malicious code in fca-yawa (npm)
- Aug 14, 2025
Malicious code in fca-xyz (npm)
- Aug 14, 2025
Malicious code in fca-tuandz (npm)
- Aug 14, 2025
Malicious code in fca-tnxtrick (npm)
- Aug 14, 2025
Malicious code in fca-tisting (npm)
- Aug 14, 2025
Malicious code in fca-sus (npm)
- Aug 14, 2025
Malicious code in fca-shadow (npm)
- Aug 14, 2025
Malicious code in fca-rqzax-remake (npm)
- Aug 14, 2025
Malicious code in fca-rqzax-dev (npm)
- Aug 14, 2025
Malicious code in fca-qlamzour (npm)
- Aug 14, 2025
Malicious code in fca-qlam (npm)
- Aug 14, 2025
Malicious code in fca-pro (npm)
- Aug 14, 2025
Malicious code in fca-pisting-yawa (npm)
- Aug 14, 2025
Malicious code in fca-manh19fc-remake (npm)
- Aug 14, 2025
Malicious code in fca-huykaiser-remake (npm)
- Aug 14, 2025
Malicious code in fca-huykaiser (npm)
- Aug 14, 2025
Malicious code in fca-hurezun (npm)
- Aug 14, 2025
Malicious code in fca-horizon-remake (npm)
- Aug 14, 2025
Malicious code in fca-duong (npm)
- Aug 14, 2025
Malicious code in fca-donqdz2006 (npm)
- Aug 14, 2025
Malicious code in fca-deku-test (npm)
- Aug 14, 2025
Malicious code in fca-deku-remake (npm)
- Aug 14, 2025
Malicious code in fca-deko (npm)
- Aug 14, 2025
Malicious code in fca-d-rm1 (npm)
- Aug 14, 2025
Malicious code in fca-d-rm (npm)
- Aug 14, 2025
Malicious code in fca-carla (npm)
- Aug 14, 2025
Malicious code in fca-bot-game (npm)
- Aug 14, 2025
Malicious code in fca-anya-remake (npm)
- Aug 14, 2025
Malicious code in fca-anjelo (npm)
- Aug 14, 2025
Malicious code in fca-aliya-remake (npm)
- Aug 14, 2025
Malicious code in fca-aliiya-remake (npm)
- Aug 14, 2025
Malicious code in fca-ali-atf (npm)
- Aug 14, 2025
Malicious code in fca-ali (npm)
- Aug 14, 2025
Malicious code in fca (npm)
- Aug 14, 2025
Malicious code in fbxloader (npm)
- Aug 14, 2025
Malicious code in fbw-platform-common (npm)
- Aug 14, 2025
Malicious code in fbrain (npm)
- Aug 14, 2025
Malicious code in fboffline (npm)
- Aug 14, 2025
Malicious code in fbjs-opensource (npm)
1 compromised version
- Aug 14, 2025
Malicious code in fbiframe (npm)
- Aug 14, 2025
Malicious code in fbfr4 (npm)
- Aug 14, 2025
Malicious code in fbdeoxicwnlkgkvt (npm)
Page 5585 of 6,634