Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,319 total · sorted newest first- Sep 13, 2026
Malicious code in ita-4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-adci-aknkonbyunaymhentbangdati (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-adci-akni (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-adci- (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-adci-aknkonbyunaymhentagdati (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itale-adci-aknkonbyunaymhentbagdati (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isover (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotopet4s-layout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isp-orion-theme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in istanbus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-wezen-phylogenetics-solis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_n82ie_zixw6_serenade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isomorphic-random-example (npm)
1 compromised version
- Sep 13, 2026
Malicious code in issuancehistoryserv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-morgan-unuk-loglevel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isoscatr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-sirius-eventhoriz-run-script (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-14 (npm)
1 compromised version
Page 408 of 7,327