Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,366 total · sorted newest first- Sep 13, 2026
Malicious code in informal_parakeet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_grasshopper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_elephant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_chimpanzee_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal-amber-boar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_goose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_lion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infotree (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_alligator_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_silverfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infraestructure-svp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_asp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_vulture_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_ptarmigan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_anglerfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infra-kafka-agent (npm)
1 compromised version
- Sep 13, 2026
Malicious code in informal_kangaroo-teagooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_partridge_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_anteater_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_cod_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-sanitize-shell-omicron-thread (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_koala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-yakutsk-json-perseus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-byte-simulate-cat-sudo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-amaranth-ermine (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_bobolink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_tahr_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infocoin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-air-monitor-deserialize-bad (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infobip-rtc-token (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-salmon-tuna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-teal-cricket (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_yv9q0_sr1ak_quiver (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_skunk_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-compile-cron-rho-export (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_hornet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_albatross_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-bronze-jaguar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_gayal_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-nova-asteroid-hermes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_jbre7_244gf_molecule (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-hercules-websockets-private (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_caribou-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-export-double-refactor-table (npm)
1 compromised version
Page 461 of 7,328