Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in intensive-crimson-finch (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-blush-iguana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inter-mobile-bridge (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_bee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested-yellow-meadowlark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inter-site-components (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_swordfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_tiger_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_hyena_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intercom-intercom-embed (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_possum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_squid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intercom-intermoji (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-fuchsia-jaguar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_sole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_egret_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_angelfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_swift_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-aqua-skink (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inter-frontend-svgs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-red-vicuna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_wombat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intercom-pulse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_locust_peach-31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intercal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-orange-toucan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_stoat-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in interested_jaguar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_rhinoceros_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_parrotfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive-harlequin-wildebeest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_limpet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intensive_macaw_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intercom-gtm-js (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_eel_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_gibbon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_planarian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent-indigo-chameleon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_bandicoot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_mink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_wildcat_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_puffin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_parrotfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_felidae_coffee-59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_weasel_z3n (npm)
1 compromised version
Page 444 of 7,327