Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in akaudit (npm)
- Aug 14, 2025
Malicious code in akarichan (npm)
- Aug 14, 2025
Malicious code in ajaxnotes (npm)
- Aug 14, 2025
Malicious code in ajakumar (npm)
- Aug 14, 2025
Malicious code in aixdlkqsmfbwyzhn (npm)
- Aug 14, 2025
Malicious code in aiwbgukjcplesthm (npm)
- Aug 14, 2025
Malicious code in aitnkcwpuysdfmjz (npm)
- Aug 14, 2025
Malicious code in aisohio (npm)
- Aug 14, 2025
Malicious code in aiskao (npm)
- Aug 14, 2025
Malicious code in airxmail (npm)
- Aug 14, 2025
Malicious code in airwave (npm)
- Aug 14, 2025
Malicious code in airwallex-online-payments-gateway (npm)
- Aug 14, 2025
Malicious code in airship.com (npm)
- Aug 14, 2025
Malicious code in airscope (npm)
- Aug 14, 2025
Malicious code in airplane-xylophone-vyq0 (npm)
- Aug 14, 2025
Malicious code in airplane-xerophyte-v1m9 (npm)
- Aug 14, 2025
Malicious code in airplane-vinegar-vp9d (npm)
- Aug 14, 2025
Malicious code in airplane-vinegar-mpxb (npm)
- Aug 14, 2025
Malicious code in airplane-titan-lgjl (npm)
- Aug 14, 2025
Malicious code in airplane-shack-bmni (npm)
- Aug 14, 2025
Malicious code in airplane-redshift-ft5i (npm)
- Aug 14, 2025
Malicious code in airplane-ocean-a3dr (npm)
- Aug 14, 2025
Malicious code in airplane-meteor-ei07 (npm)
- Aug 14, 2025
Malicious code in airbnb-vortex-release-it-yonder (npm)
- Aug 14, 2025
Malicious code in airbnb-typescript-prettier (npm)
- Aug 14, 2025
Malicious code in airbnb-typescript (npm)
- Aug 14, 2025
Malicious code in airbnb-tracking (npm)
- Aug 14, 2025
Malicious code in airbnb-relaxed (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-quasarjet-biogeochemistry-primatology (npm)
- Aug 14, 2025
Malicious code in airbnb-navigation (npm)
- Aug 14, 2025
Malicious code in airbnb-lite (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-hooks (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-hermes-redis-umbriel (npm)
- Aug 14, 2025
Malicious code in airbnb-fornax-draco-electron-builder (npm)
- Aug 14, 2025
Malicious code in airbnb-flow (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-es5 (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-cryovolcano-steganography-hexo (npm)
- Aug 14, 2025
Malicious code in airbnb-bundle (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-base (npm)
4 compromised versions
- Aug 14, 2025
Malicious code in airbnb-angular (npm)
1 compromised version
- Aug 14, 2025
Malicious code in air-deploy-air-stub-bash (npm)
- Aug 14, 2025
Malicious code in air-cron-moon-compress-hash (npm)
- Aug 14, 2025
Malicious code in air-container-await-mock-final (npm)
- Aug 14, 2025
Malicious code in aion-web3-eth-iban (npm)
- Aug 14, 2025
Malicious code in ainyahya (npm)
- Aug 14, 2025
Malicious code in aimphone (npm)
- Aug 14, 2025
Malicious code in aimaze (npm)
- Aug 14, 2025
Malicious code in aileron-logger (npm)
- Aug 14, 2025
Malicious code in aigamnds (npm)
- Aug 14, 2025
Malicious code in aid-mercury (npm)
Page 5707 of 6,634