Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in iomodra-fuoa-jafulfua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-canopus-loopback-eleventy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionicfb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionstudio (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iosgithub (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-bellatrix-husky-passport (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-astro-ophiuchus-ini (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-centaurus-blackhole-cosmicray (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-cross-env-socketio-child-process (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fuoa-jafuliafua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fuoa-jafa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iot-gateway-plugin-rtls (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ioslib2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ions-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ion-lsp-server (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-prettier-plugin-markdown-yonder-chai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-cryptography-quasar-radioastronomy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-ursa-asthenosphere-mongoose (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fuoa-jafufua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-configstore-sirius-tailwindcss (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-bootes-kinetic-quasar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-triton-selenium-janus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-concurrently-docusaurus-procyon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-babel-epimetheus-foundation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-betelgeuse-rest-sass-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fuoa-janu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-terraforming-string-exosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-aether-hawkingradiation-augmentedreality (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-bash-bundle-delta-encrypt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-deneb-quark-mocha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fuoa-jan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-biohacking-dotenv-safe-delphinus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-centaurus-redis-terser (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-aurora-dione-archaeometry (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-docusaurus-mdx-backend (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iostools (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iorgvd-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ioniccrd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iota-class-info-phi-code (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ionosphere-promise-vuepress-spectron-webdriver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iostarter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-foruai-jai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-forufua-jali (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-foa-jafuliafa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-forufai-agoai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-forufugai-jai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-foiori-agoai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-foruai-agoupai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-fora-jali (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iomodra-forufai-agopai (npm)
1 compromised version
Page 431 of 7,327