Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in intimate_skink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intoprufa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-amethyst-bedbug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in introcie (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_angelfish_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_hippopotamus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_lynx_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_anteater_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_bobcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_shark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interview-question (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate-tomato-parrot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intimate_kangaroo_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_ferret_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internallib_v663 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_magpie-notthedev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-materialize-robotics-jovian (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-amaranth-booby (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_firefly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_woodpecker_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_badger_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_planarian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internallib_v731 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_louse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internallib_v741 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_cricket_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_heron-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internallib_v495 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internalpackage-ncctest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-biomimicry-sirius-rimraf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interpret-deploy-omega-async-fire (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_donkey_tomato-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_mole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_boar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_sole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_aardvark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_hedgehog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_crow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-init-rollup-electron-builder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_bovid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_lynx_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_swordtail-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-nightwatch-bionics-xanadu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_eel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-silver-turkey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_fly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-sapphire-dove (npm)
1 compromised version
Page 439 of 7,327