Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
330,055 total · sorted newest first- Sep 10, 2026
Malicious code in fanada (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-blush-egret (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_hummingbird_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_cuckoo_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-radiate-ygx449-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_whale_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_cattle_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_bovid-appteadev (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-blue-sailfish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy_bobcat_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-apricot-whitefish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-pure-vfk847-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_mite_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fancy-tomato-pony (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_hippopotamus_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_firefly_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-beige-tern (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-cyan-crayfish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_heron_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_ox_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_anaconda_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_angelfish_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-coral-fly (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy167 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_puma_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familylink (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy447 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_cicada_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-red-stoat (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_angelfish-notthedev (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-jade-felidae (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-amethyst-coyote (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_goose_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_ape_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_marsupial_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-aquamarine-unicorn (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous_firefly_0xrequest (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_scorpion_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in famous-scarlet-dog (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy463 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy362 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in family-island-unlimited-energy285 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_limpet_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_firefly_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_kiwi_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_jackal_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_minnow_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_ptarmigan_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_marten_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_hare_z3n (npm)
1 compromised version
Page 3 of 6,602