Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in intermediate_crane_orange-89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_partridge_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-crimson-tern (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_pigeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_booby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate-azure-rooster (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-helper-utils (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-lib-vulnerable (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-corp-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate-blue-ant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_moth_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-azure-boar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_narwhal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_asp_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-native-buy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_mink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-api-insights (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_tiger_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-links-autocomplete-id (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_sparrow_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_muskox_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-corp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-logger-embaby (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-company-module-test-1337 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_aardvark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_rat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_marmot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_lion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_marmoset_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in internal-forc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_hare_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_canidae_blue-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_urial_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_bobolink_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate-cyan-mockingbird (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate_dinosaur_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_echidna_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_constrictor_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-paleoanthropology-innercore-seismology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_manatee_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior-blush-guan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_cuckoo_red-43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim-ivory-trout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_mammal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_cuckoo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_spoonbill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_eel_z3n (npm)
1 compromised version
Page 441 of 7,327