Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in isp-orion-theme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in istanbus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-wezen-phylogenetics-solis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_n82ie_zixw6_serenade (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isomorphic-random-example (npm)
1 compromised version
- Sep 13, 2026
Malicious code in issuancehistoryserv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-morgan-unuk-loglevel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isoscatr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-sirius-eventhoriz-run-script (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope-webhooks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_6am4g_corpc_phoenix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-rate-limiter-miranda-chalk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotemplate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in istanbul_test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_lznzo_g55ay_zenith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_7cbky_d6dcc_ocean (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isv-upx-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-ganymede-archaeogenetics-markdown (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-paleoclimatology-thuban-augmentedreality (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-loopback-docusaurus-inflation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_3pyse_l3m1i_xylophone (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_m0omj_qdafl_night (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_yyrj0_mwgxs_quiver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-slides-augmentedreality-jabbah (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isv-buc-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-hawkingradiation-pegasus-axios (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_zudyp_nn07o_solstice (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-config-astrophysics-stop (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isostasy-meteor-passport-npm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isv-buc-utils (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope-dev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in issaiko (npm)
1 compromised version
- Sep 13, 2026
Malicious code in issuancemanagementserv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isotope_umtwr_vc4uq_whisper (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ita-13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isvalidelectroneumaddress (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-koala-ify991-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-everglow-wde261-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated-lime-slug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-jj8iw-b2xwb-jade-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated-silver-ape (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_turkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_aardvark-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-xerus-fev101-project (npm)
1 compromised version
Page 409 of 7,327