Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in interested_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_tortoise_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_louse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_firefly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-awk-balance-epsilon-orchestrate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-jade-parrot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_woodpecker_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_landfowl_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_manatee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting-magenta-wolf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_planarian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interets (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-sigma-rain-pi-mu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_cat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_louse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_baboon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_jay_violet-81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-cluster-hadron-paleoanthropology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_cheetah_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_mink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_pigeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_wolverine_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_dragon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_snake-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_alligator_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interferometry-bootes-gridsome-dotenv-parse-variables (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_jackal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_sloth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_eagle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-stack-mock-execute-log (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-cloud-class-benchmark-debug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_bear_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_opossum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_grasshopper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_bandicoot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-signal-encode-authorize-big (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_hamster_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interface-iota-tau-optimize-bundle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_puma_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_fish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_pigeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_mockingbird_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_squirrel_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_smelt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interesting_caterpillar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_parakeet_z3n (npm)
1 compromised version
Page 443 of 7,327