Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in ishanchauhan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-6cg1j-kjrhe-throne-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-everest-gde191-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iscaffold (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-coral-vzt892-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ishanisharma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in islamway (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-aspen-oki765-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-798ev-2csww-twilight-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in islaadams (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ishwarjain (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isaiah-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iseage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-elephant-smh001-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isl-server (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isaboliversimpsonellajenkins (npm)
1 compromised version
- Sep 13, 2026
Malicious code in island-arctic-zmw994-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellehughes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabelasouza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellathomas (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellarobinson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellawilliams (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellajenkins (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irwin-teadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabelcarvalho (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellejones (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irrelevant_zebra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellesmith (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellesanders (npm)
1 compromised version
- Sep 13, 2026
Malicious code in is-jailbreak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irulmemek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellaribeiro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irviewer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellahart (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellemartin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in is-mlcs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irulkontol (npm)
1 compromised version
- Sep 13, 2026
Malicious code in is (npm)
1 compromised version
- Sep 13, 2026
Malicious code in is24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellajones (npm)
1 compromised version
- Sep 13, 2026
Malicious code in is24-desktop (npm)
1 compromised version
- Sep 13, 2026
Malicious code in isabellathompson (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe98-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tumis86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tongseng18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tongseng7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-wajit38-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irrelevant-plum-impala (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ubi79-breki (npm)
1 compromised version
Page 411 of 7,327