Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in international_swordtail-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interstellarmedium-nightwatch-bionics-xanadu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_eel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-silver-turkey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_fly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-sapphire-dove (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_leopard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_rodent_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intershop-schematics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international-copper-lion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_lark_sapphire-67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in international_panda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-utils (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-test-utils-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_dragon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_carp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_fowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_halibut_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_beetle-strongdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_otter_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_bird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-runtime (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_jackal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internallib_v189 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_app (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_dolphin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-udfc-pkg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_panther_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_chicken_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_bass_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-pkg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-runtime-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_coral_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_gopher_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_acc_pkg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-secret-project-1234 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-plugin-lifecycle-card (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_goat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_crawdad_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-random (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_hamster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-test-devoxx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_chickadee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-vscode-extension (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-newrelic-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_worm_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_panda-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_tapir_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal_duck_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate-scarlet-smelt (npm)
1 compromised version
Page 440 of 7,327