Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
330,055 total · sorted newest first- Sep 10, 2026
Malicious code in familiar_hippopotamus_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_marlin-appteadev (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_prawn_scarlet-18 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_jaguar_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_porcupine_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_herring_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_finch_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_lynx_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_halibut_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_eel_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_chinchilla_cyan-60 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_bedbug_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-magenta-wildfowl (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallen-merely-hay (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallguys (npm)
1 compromised version
- Sep 10, 2026
Malicious code in false-positive-reddit-rce (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_ant_dumbs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-copper-lark (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-gold-limpet (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon_olive-4 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_dove_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falsepositivecheck6969 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_guan_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-olive-pelican (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallen-fallen-web (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar_bison_z3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-teal-panda (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-chocolate-meadowlark (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-orange-camel (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-plum-crayfish (npm)
1 compromised version
- Sep 10, 2026
Malicious code in familiar-indigo-cockroach (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcor-datasource-chainer (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-walnut-jpd7 (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nutmeg-hw6d (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jade-vpi888-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-horizon-ocd445-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-hill-zyq727-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-horizon-muf992-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-topaz-aes130-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-zenith-ams842-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jade-uhj749-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-jasmine-ini080-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-quasar-our901-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fallbax (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-oak-526l (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-honey-vid757-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-peacock-evw208-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-quokka-hz3n (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-xerus-nvx836-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nocturne-tln311-project (npm)
1 compromised version
Page 4 of 6,602