Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in liberal_urial_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in library-blaze-heka-lint (npm)
1 compromised version
- Sep 17, 2026
Malicious code in library-capella-tectonic-child-process (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libinoro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libmii (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-red-aardwolf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libcutsim (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_flea_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_bug_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_felidae_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_bird_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libdvd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_porcupine_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_marmoset_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libdgg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-lime-skink (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-maroon-eel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-maroon-wasp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_crane_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_eagle_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-lime-otter (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_roundworm_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_leech_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_centipede-apptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libefsm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_quail-smiletea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_angelfish_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-azure-tiglon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal-apricot-krill (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_quelea_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liberal_koala_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-ag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libblp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuificaafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafufiaafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafiafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agagidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafiag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-ataffiaafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-ag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuifcafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuificafaffaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agufixagidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-aga (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuifaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agufagidug (npm)
1 compromised version
Page 129 of 7,312