Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,366 total · sorted newest first- Sep 13, 2026
Malicious code in influential_turtle_harlequin-86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-weywot-comet-xo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-user-wind-book-sanitize (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_emu_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influx-query-builder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_alpaca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_duck_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-violet-booby (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-gold-owl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-antd-dependencies-phoenix (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_marmot_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_sturgeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in info-gamma-eta-xi-cluster (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential-chocolate-jellyfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_guineafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in influential_slug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jilagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigugaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jiagitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigugamafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jagitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_6njel_jxp8p_vantage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-rainbow-lfq530-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigtga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jagi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_jxiyh_0eh19_nova (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafobai-jlagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_08wsx_hzyhp_vantage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-dove-qev776-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigtaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-xenon-cci996-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafobai-jagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafobai-jlaagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-river-xpr242-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inflation-apollo-rocket-higgs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-iceberg-pxa717-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-titan-4nsz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jilaagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-lightning-lij114-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-sunset-qsh049-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafobai-jilaagoitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-peacock-qvy720-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jagia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_3pc8h_welvy_voyage (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafobi-jagoitaga (npm)
1 compromised version
Page 462 of 7,328