Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in isolcss (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_mammal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island_gkd44_dvr2v_illusion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ismaelfromage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-quokka-u0mv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in islands-promo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-quail-ooy506-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_elephant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ismakusuma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_gull_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_koala-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated-white-hippopotamus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-rf1j2-dz73l-raven-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in islands-codestyle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-yak-gav530-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ismailbaguette (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_penguin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated-bronze-jackal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_orca_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-spinach-tehl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isohill (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-ntgm1-zymvl-harmony-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-horizon-gsx090-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-nebula-fxk717-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-peacock-uhs701-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-lunar-t7bx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-reef-nhk867-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_pike_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_lamprey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_takin-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isobellemurray (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_dinosaur_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated-ivory-tapir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_fox_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_mongoose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-vzo41-veekc-kelp-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_mastodon_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-icicle-cgg499-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-hedgehog-qvo612-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island_g2gzs_j69zv_yacht (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island_izpwg_um9xj_xylophone (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_finch_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_gazelle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-kapok-xsa8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_crocodile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isolated_xerinae_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-peacock-hro883-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ishaankapoor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ishtiaq (npm)
1 compromised version
Page 410 of 7,327