Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in fbdemo (npm)
- Aug 14, 2025
Malicious code in fbconsole (npm)
- Aug 14, 2025
Malicious code in fbcode (npm)
- Aug 14, 2025
Malicious code in fbchan (npm)
- Aug 14, 2025
Malicious code in fb-tanjiro (npm)
- Aug 14, 2025
Malicious code in fb-logger (npm)
- Aug 14, 2025
Malicious code in fb-jake (npm)
- Aug 14, 2025
Malicious code in fb-deku-rm (npm)
- Aug 14, 2025
Malicious code in fb-deku-remake (npm)
- Aug 14, 2025
Malicious code in fb-chat-shadow (npm)
- Aug 14, 2025
Malicious code in fb-chat-deku (npm)
- Aug 14, 2025
Malicious code in fb-anya (npm)
- Aug 14, 2025
Malicious code in fazilet-scrapper (npm)
- Aug 14, 2025
Malicious code in fazilet-cli (npm)
- Aug 14, 2025
Malicious code in fazana (npm)
- Aug 14, 2025
Malicious code in favour (npm)
- Aug 14, 2025
Malicious code in fauzi-tempe17-breki (npm)
- Aug 14, 2025
Malicious code in fauzi-sasag90-sukiwir (npm)
- Aug 14, 2025
Malicious code in fauzi-pecel42-breki (npm)
- Aug 14, 2025
Malicious code in fauzi-martabak74-sukiwir (npm)
- Aug 14, 2025
Malicious code in fauzi-lapis65-kuki (npm)
- Aug 14, 2025
Malicious code in fauzi-getuk35-sukiwir (npm)
- Aug 14, 2025
Malicious code in faustwp-core (npm)
- Aug 14, 2025
Malicious code in faustwp-cli (npm)
- Aug 14, 2025
Malicious code in faustwp (npm)
- Aug 14, 2025
Malicious code in fatkit (npm)
- Aug 14, 2025
Malicious code in fastyle (npm)
- Aug 14, 2025
Malicious code in fastpaxos (npm)
- Aug 14, 2025
Malicious code in fastip (npm)
- Aug 14, 2025
Malicious code in fastgcn (npm)
- Aug 14, 2025
Malicious code in fastcgiqt (npm)
- Aug 14, 2025
Malicious code in fast-requests (npm)
- Aug 14, 2025
Malicious code in fast-proxy-pi-query-zeta (npm)
- Aug 14, 2025
Malicious code in fast-pack-app-components (npm)
- Aug 14, 2025
Malicious code in fast-mu-moon-moon-permission (npm)
- Aug 14, 2025
Malicious code in fast-long-secure-function-bundle (npm)
- Aug 14, 2025
Malicious code in fast-enum-compress-index-minify (npm)
- Aug 14, 2025
Malicious code in fast-cloud-mu-debug-sandbox (npm)
- Aug 14, 2025
Malicious code in fast-bash-tree-reject-omicron (npm)
- Aug 14, 2025
Malicious code in fashiongo-web-admin-v2-web (npm)
- Aug 14, 2025
Malicious code in fasetter (npm)
- Aug 14, 2025
Malicious code in farwolf (npm)
- Aug 14, 2025
Malicious code in farout-stream-loglevel-sequelize (npm)
- Aug 14, 2025
Malicious code in farout-redis-neptune-gatsby (npm)
- Aug 14, 2025
Malicious code in farout-publish-fornax-on (npm)
- Aug 14, 2025
Malicious code in farout-petrology-darkmatter-gatsby (npm)
- Aug 14, 2025
Malicious code in farout-hadron-terraforming-impulse (npm)
- Aug 14, 2025
Malicious code in farout-fetch-eslint-config-wolf (npm)
- Aug 14, 2025
Malicious code in farout-apollo-comet-wavefunction (npm)
- Aug 14, 2025
Malicious code in farmtick (npm)
Page 5586 of 6,634