Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,366 total · sorted newest first- Sep 13, 2026
Malicious code in infi-gfobai-jigitaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity_7vg3m_avwx5_yonder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jiguga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gafob-jagitga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-umbrella-dfb436-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigugamafi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infinity-aspen-ikd431-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-zeppelin-po2r (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-helicopter-l4v2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigugamai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in infi-gfobai-jigugama (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-zest-3vjl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-yacht-pcs1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_muskox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_marsupial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_jackal_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_mastodon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_grasshopper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-eagle-i75z (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ineldua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inexor-tree (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_harrier_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_urial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_pelican_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_tuna_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable-pink-loon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_dinosaur-toolteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_peacock_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_armadillo_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_smelt_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_smelt_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_wasp_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_kiwi-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_basilisk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable-lavender-quail (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inferno-deciduous-eykx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_moose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_gamefowl-excellentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_opossum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_rhinoceros_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_jay_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_gibbon_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable-pink-pinniped (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_bee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_rooster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable_porcupine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in industrial_chinchilla_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inevitable-amber-vulture (npm)
1 compromised version
Page 463 of 7,328