Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in libbsd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-react-component-page-notifications (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafufaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agagig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafuifiaafaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-transmit (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-storage (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafiaag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agufxagidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ubg-atafuig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-aguagidug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-atafuifiafaffaig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in libc-ug-agagiug (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamwilson (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_mammal_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_mandrill_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_narwhal_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-bb-html-sanitizer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamthomas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamdavies (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liambutler (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_rabbit_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_hoverfly_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamjones (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lianji (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-deepdocs-js (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liangzi-chuliao-ver2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_worm_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_ladybug-silentdev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-automotive-call-cdm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-dynamodb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liaoyu-chuliao-haojiandan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_mongoose-appteadev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-comdig (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_moth_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_vulture_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_peacock_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liaindah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liasuren (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamlane (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liasurmanidze (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liable_whippet_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lib-jitsi-meet-sample (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamobrien (npm)
1 compromised version
- Sep 17, 2026
Malicious code in liamharris (npm)
1 compromised version
Page 130 of 7,312