Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in intan-20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact-amber-jellyfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_lobster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_toad_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_catfish_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_marten-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_sparrow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_hippopotamus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_centipede_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_lemming_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_hawk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_vicuna_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact-crimson-rodent (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_lizard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_dog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_moth_lavender-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in int_affirm_controllers (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_loon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_sloth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_wildebeest_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_butterfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in int-browsing-gateway (npm)
1 compromised version
- Sep 13, 2026
Malicious code in int_worldpay_sfra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_yak_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_bedbug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_weasel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_owl_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_heron_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_catfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_badger_moccasin-3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_gull_jade-32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intact_impala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in intan-13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in insufficient_stoat_z3n (npm)
1 compromised version
Page 449 of 7,327