Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in intense-purple-gopher (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent-white-pheasant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_newt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_gopher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_limpet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_sailfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-turquoise-pike (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_narwhal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_cricket_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_snipe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_rodent_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_lizard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-bronze-stingray (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_finch_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_damselfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-teal-wasp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-amaranth-piranha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_tyrannosaurus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-rose-herring (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_marmot_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_manatee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-salmon-boar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_platypus_blush-59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_grasshopper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_rat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_tick_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_hare_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_owl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense-lime-hare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_spider_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_wildebeest_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_macaw_gray-91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_angelfish-teagooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_dragon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_crocodile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_grouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_sloth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intense_boa_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_wolverine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integration-web-core--socle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_scorpion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intel-ai-assistant-ai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent-lime-peacock (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_llama_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_swordfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_guan_harlequin-96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual-brown-llama (npm)
1 compromised version
Page 445 of 7,327