Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in interim_slug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-hyperion-astrophysics-xml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_reindeer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_alligator_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_peafowl-strongdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_wolf-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_armadillo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_peafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_mollusk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_lion_gold-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_albatross_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_meadowlark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-zephyr-procyon-wavefunction (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior-beige-herring (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_wolf_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intermediate-aquamarine-perch (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-install-phenomic-mysql (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_flyingfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_goldfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_tiglon_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_owl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_coyote_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-europa-run-script-xanthus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim-blush-zebra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_mockingbird_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior-olive-silkworm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_shrew_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_heron_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_wallaby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_cockroach_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_gopher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-seismology-bulma-rigel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_emu_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_mite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_cheetah_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_gibbon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_kingfisher-toolteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_ferret_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim_camel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interim-peach-primate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior_monkey_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interior-chocolate-chickadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-gold-mite (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_kiwi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_orca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-jade-crab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-tan-roadrunner (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-yellow-lobster (npm)
1 compromised version
Page 442 of 7,327