Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in input-error-field (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_cockroach_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-nextjs-galaxy-hyperion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-publish-mysql-antares (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-betelgeuse-perseus-centaurus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive-harlequin-crab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-lacerta-build-octans (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-cosmos-sqlite-shelljs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_mole_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-spinner-telesto-dione (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-quasar-polaris-aquarius (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive-olive-mastodon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_whale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-uglify-js-enceladus-cassini (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive-red-flamingo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive-coral-swan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovid-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-duplex-process-hyperion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_chameleon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_duck_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-subscription-atlas-nestjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-virgo-global-regulus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_flamingo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-loop-airbnb-proxima (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-gemini-ultra-version (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-technosignature-slidev-sagitta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_cardinal-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-flare-sass-loader-tectonic (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquisitive_aardwolf_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-resonance-stratosphere-zenobia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-stop-spectron-tethys (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-child-process-concurrently-despina (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inquirer-pm2-graphql-miranda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_hedgehog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_marmot-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative-aqua-scallop (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_wallaby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_cheetah_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_emu_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_gibbon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative-green-newt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_meerkat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_clownfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_whitefish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative-salmon-toucan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative-lavender-roadrunner (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_lungfish_requirement (npm)
1 compromised version
Page 454 of 7,327