Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in intellectual_heron_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_chicken_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent-ivory-finch (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_guan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_tarsier_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integromat-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_canid_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual-gray-sturgeon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_tuna_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_leopard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_wallaby_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integration-icons (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_cicada_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intel_collab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrationkit-nodejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_amphibian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual-ivory-piranha (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integreat-transporter-rabbitmq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_capybara_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intel-ai-assistant-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_snipe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_dormouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intel-quantum-sdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integration-date (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intelligent_clownfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_quelea_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_termite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_lark_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_snail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_cockroach_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intellectual_chimpanzee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integration-hub-worker-base (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_mollusk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-lambda-notify-cache-try (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_hedgehog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intankusuma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-omega-virtualize-star-meta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-slow-java-object-string (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_parrotfish-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-tau-chi-alert-gamma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-kappa-sigma-double-view (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_wildebeest_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-pipe-beta-orchestrate-simulate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_anaconda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-execute-shell-runtime-protected (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_pike_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_leopon_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_ferret_z3n (npm)
1 compromised version
Page 446 of 7,327