Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in item-ati-zpojozika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubusiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiomizauzkapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-lza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubusisasiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-zjzakuika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-laboka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-kubsiduzika (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-ati-za (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-duoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_guanaco_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_gorilla_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjpka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabboka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_dove_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyaoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labioka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_junglefowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_booby_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyaboka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labiagka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_tyrannosaurus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjpoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itelepass (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_koi_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyaka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_anteater_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_squirrel_pink-47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjpeka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_lynx_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_barracuda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_cockroach_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy-white-fly (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_lemur_copper-59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_urial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-doa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_impala-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_crocodile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyabbjpeoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_snail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy_mastodon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieagyeyoka (npm)
1 compromised version
- Sep 13, 2026
Malicious code in item-at-labieaoka (npm)
1 compromised version
Page 401 of 7,327