Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Sep 13, 2026
Malicious code in itale-dci-rsut (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy-tan-zebra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-systrt4tf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itbank (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-sstrtf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-srygfywevgt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy-magenta-opossum (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy-silver-bandicoot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itchy-indigo-newt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfrttr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfsfrgdrgtet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rryusysyt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrst (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrusyyt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyhfuyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jygwyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-reet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyhfyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rryusyfsytt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfsfrgdrget (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrsettt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfrtr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrsetrtt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rsguset (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrusysyt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jygwuyrfwuyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rryusyfsufytftt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyhfr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfrt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rryusyfsuytt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jygwuywuyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rrstt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfsrggt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jyhgfuyr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfsrgget (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rryusyfsufyftt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfrttytr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-reteet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfsfrgdget (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-ret (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rsgustduet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-retetet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-rfrtt4ytr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-reeet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-dci-jygwuyr (npm)
1 compromised version
Page 403 of 7,327