Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in integrated_elk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_goat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_turtle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-simulate-mu-class-permission (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_lungfish-teagooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-optimize-alpha-byte-authenticate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_loon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_kiwi-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_otter_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-web-key-resolve-mu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_peafowl_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated-aquamarine-pheasant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-stack-uglify-decrypt-dog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_possum-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_cockroach_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_reindeer_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_mammal_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_leech-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_basilisk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated-magenta-pigeon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_yak_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral-crimson-wombat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_pinniped-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_octopus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_sparrow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral-lime-cod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_koala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_anteater-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integer-bad-socket-execute-emulate (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_giraffe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_boar_green-89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integrated_emu_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral-green-marlin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral_catfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in integral-peach-goat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-72 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-76 (npm)
1 compromised version
Page 447 of 7,327