Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in item-atim-kuja (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujoloi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kujabi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubuskiumabika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itembuyer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujolinoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atm-kujolnoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisaszika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ifut-duoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-kubusisasidzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labigka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-oka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpojoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiomizzkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zjkuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiokapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-atim-ku (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiomizazkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubussiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labioza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiomizazkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyyka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpojozakika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpooa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiomizazaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiozkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-laoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpojozia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiomza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubusisiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpojozakuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiomizaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubdzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zpjozakuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubsduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-labiomiza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labikpa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labioizkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-oa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labkpa (npm)
1 compromised version
Page 400 of 7,327