Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in ivory-infinite-kgy760-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itmoah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-i8xdk-583dw-kelp-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itwsii (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuqkus-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-6m9fb-tsi90-fable-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iview-cacscader-multi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-ognqy-uy9rz-tranquil-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuythdjfghgff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-kuiper-gvol (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusiabika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujalahubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusiaka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujoli (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisasiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujaubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisazika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuskui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujaui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusibika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kuu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujahubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisasizika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuskuaia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusaka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ithemes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ut-duoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-box (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuskuai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-shop-data-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujolioaknoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujauhubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujaulahubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusimabika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusiumabika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusbika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuskiuabika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujaulahubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujaahubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujolianoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuaka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kuji (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisaka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujoliaknoi (npm)
1 compromised version
Page 399 of 7,327