Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,337 total · sorted newest first- Sep 13, 2026
Malicious code in innovative_beetle_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_alligator-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_crab_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_mockingbird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocoder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative-indigo-guppy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innotecsaludo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innogames (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_snake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_guan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_mandrill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_catshark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_opossum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocms (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_snipe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_panda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_orca_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_worm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_kingfisher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_moth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innovative_constrictor_scarlet-36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_galliform_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_bonobo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_swan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_skink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_lion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inno-pubsub (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_rodent_plum-33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner-lavender-carp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_antelope_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_amphibian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_fox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_sloth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_rook_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_leopard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_guan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innercore-biohacking-aether-inflation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_ox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inline-icons (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inner_crawdad_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_crayfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innercore-betelgeuse-primatology-auth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent-amaranth-moth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_platypus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innocent_bobcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inland_limpet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in innercore-phoebe-quasar-atlas (npm)
1 compromised version
Page 455 of 7,327