Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,559 total · sorted newest first- Oct 19, 2026
Malicious code in ju0oud (npm)
- Oct 19, 2026
Malicious code in j5opb7 (npm)
- Oct 19, 2026
Malicious code in j019qc (npm)
- Oct 19, 2026
Malicious code in ivzlid (npm)
- Oct 19, 2026
Malicious code in gtjgd4 (npm)
- Oct 19, 2026
Malicious code in giu094 (npm)
- Oct 19, 2026
Malicious code in g8ez1y (npm)
- Oct 19, 2026
Malicious code in g23p4g (npm)
- Oct 19, 2026
Malicious code in f4iomt (npm)
- Oct 19, 2026
Malicious code in f0klcr (npm)
- Oct 19, 2026
Malicious code in esgbz5 (npm)
- Oct 19, 2026
Malicious code in aqj3w7 (npm)
- Oct 19, 2026
Malicious code in 8i7pp4 (npm)
1 compromised version
- Oct 19, 2026
Malicious code in 8h66ok (npm)
- Oct 19, 2026
Malicious code in 5xzkuy (npm)
- Oct 19, 2026
Malicious code in 5k5t5q (npm)
- Oct 19, 2026
Malicious code in 4p9kgm (npm)
- Oct 19, 2026
Malicious code in 3qamjp (npm)
- Oct 19, 2026
Malicious code in 3gr841 (npm)
- Oct 19, 2026
Malicious code in 3gr2dj (npm)
- Oct 19, 2026
Malicious code in 1n9lip (npm)
- Oct 19, 2026
Malware in 3qamjp
1 compromised version
- Oct 19, 2026
Malware in f0klcr
1 compromised version
- Oct 19, 2026
Malware in 5k5t5q
1 compromised version
- Oct 19, 2026
Malware in rvmbnj
1 compromised version
- Oct 19, 2026
Malware in 1n9lip
1 compromised version
- Oct 19, 2026
Malware in 5xzkuy
1 compromised version
- Oct 19, 2026
Malware in gtjgd4
1 compromised version
- Oct 19, 2026
Malware in ivzlid
1 compromised version
- Oct 19, 2026
Malware in j5opb7
1 compromised version
- Oct 19, 2026
Malware in oo9fja
1 compromised version
- Oct 19, 2026
Malware in waojpf
1 compromised version
- Oct 19, 2026
Malware in ljem3j
1 compromised version
- Oct 19, 2026
Malware in giu094
1 compromised version
- Oct 19, 2026
Malware in aqj3w7
1 compromised version
- Oct 19, 2026
Malware in 8i7pp4
1 compromised version
- Oct 19, 2026
Malware in x294tn
1 compromised version
- Oct 19, 2026
Malware in rhlozh
1 compromised version
- Oct 19, 2026
Malware in 3gr2dj
1 compromised version
- Oct 19, 2026
Malware in f4iomt
1 compromised version
- Oct 19, 2026
Malware in g8ez1y
1 compromised version
- Oct 19, 2026
Malware in ysqp68
1 compromised version
- Oct 19, 2026
Malware in g23p4g
1 compromised version
- Oct 19, 2026
Malware in lstsyw
1 compromised version
- Oct 19, 2026
Malware in zubn7b
1 compromised version
- Oct 19, 2026
Malware in ju0oud
1 compromised version
- Oct 19, 2026
Malware in 8h66ok
1 compromised version
- Oct 19, 2026
Malware in noe77e
1 compromised version
- Oct 19, 2026
Malware in j019qc
1 compromised version
- Oct 19, 2026
Malware in 4p9kgm
1 compromised version
Page 32 of 7,312