Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in inufgi-gobali-janiguga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagili-janiaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamufia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janigufga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotama-jamanana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jama (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-januaalai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotama-aaana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janulai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-januli (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagilai-janiaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufgaiana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagilai-januqigaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobglai-januga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-configstore-dotenv-safe-oauth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-pino-bulma-darkenergy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamgiana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_boar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_turtle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-black-moose (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interview-code-challenge-full-stack (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-silver-pony (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_jaguar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-ivory-whippet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_caribou_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-postcss-loader-chromedriver-innercore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_prawn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_crawdad_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_clam_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamgaiana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_butterfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in introspy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-lime-parakeet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-magenta-crawdad (npm)
1 compromised version
- Sep 13, 2026
Malicious code in introtor (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_bear_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_wombat-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_mole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_wren_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_eagle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intershop-schematics4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_booby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_marsupial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intuit-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-blue-hare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interpret-rain-delta-sed-resolve (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-coronalmassejection-hadron-quasar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-uninstall-update-paleoanthropology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intl-summer-2017 (npm)
1 compromised version
Page 438 of 7,327