Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
239,899 total in npm · sorted newest first- Jul 13, 2026
Malicious code in sixseven1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks9 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks5 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks4 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks2 (npm)
4 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks10 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ratelimitsucks1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in miguelphonk (npm)
- Jul 13, 2026
Malicious code in ishowfeet9 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet8 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet7 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet6 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet5 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet4 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet2 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet16 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet12 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet11 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet10 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in ishowfeet1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in imillegal5 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in imillegal4 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in imillegal3 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in imillegal2 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in imillegal1 (npm)
3 compromised versions
- Jul 13, 2026
Malicious code in howmanygreatbritain (npm)
1 compromised version
- Jul 13, 2026
Malicious code in bismillahitidakimas (npm)
1 compromised version
- Jul 13, 2026
Malicious code in backupsitetuff9 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in backupsitetuff6 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in backupsitetuff3 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in backupsitetuff10 (npm)
2 compromised versions
- Jul 13, 2026
Malicious code in whatsadmaidk (npm)
1 compromised version
- Jul 13, 2026
Malicious code in thebigyahu (npm)
1 compromised version
- Jul 13, 2026
Malicious code in pasirianspirit (npm)
1 compromised version
- Jul 13, 2026
Malicious code in omgyesyesyes (npm)
1 compromised version
- Jul 13, 2026
Malicious code in omglucidesotuff (npm)
1 compromised version
- Jul 13, 2026
Malicious code in midnightrush (npm)
1 compromised version
- Jul 13, 2026
Malicious code in lowkirkuenly (npm)
1 compromised version
- Jul 13, 2026
Malicious code in lowkeybored (npm)
1 compromised version
- Jul 13, 2026
Malicious code in kirkland (npm)
- Jul 13, 2026
Malicious code in ilovefemboys (npm)
1 compromised version
- Jul 13, 2026
Malicious code in fflc-updated (npm)
1 compromised version
- Jul 13, 2026
Malicious code in crazynut (npm)
1 compromised version
- Jul 13, 2026
Malicious code in changiairportpromax (npm)
- Jul 13, 2026
Malicious code in captainindia (npm)
1 compromised version
- Jul 13, 2026
Malicious code in bomboclatwallahi (npm)
1 compromised version
- Jul 13, 2026
Malicious code in backupgenuine-updated (npm)
1 compromised version
- Jul 13, 2026
Malicious code in backup5-updated (npm)
1 compromised version
Page 6 of 4,798