Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,367 total · sorted newest first- Sep 13, 2026
Malicious code in india-zucchini-romeo-vvqdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-w82-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indexhsjskks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-nectarine-golf-grpfe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-delta-ybzv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-mango-oscar-tucca (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-mike-hotel-iuqps (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-papa-zulu-nryuc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-inferno-kafm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-pma-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-lima-charlie-slrga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-banana-zcxj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-nectarine-pvpq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-kwt-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-foxtrot-bqdg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-apple-victor-nrhoy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-banana-xray-uadxb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-mbr-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-delta-ervi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-quince-vqzo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-ba6-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-echo-szzu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-nz1-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-juliet-orange-hxbfx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-date-watermelon-aeufe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-november-k3im (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-bravo-papa-lgddp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-golf-dnji (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-kiwi-date-viqoy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-k9e-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-fir-8748 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-alpha-uniform-gyywa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-oscar-cherry-jaoae (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-sierra-bhsm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-sierra-papaya-hixcq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-juliet-gjly (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-r7w-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-dwarf-sle1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-a8t-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-ferry-odt1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-mango-apple-bbwex (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indexa-fotdio-agov (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-delta-tdin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-hotel-tangerine-ihqvz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-papa-runh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in india-grape-elderberry-notgb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in independent_jackal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indexa-fotadio-agv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in independent_mastodon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in independent_loon_dumbs (npm)
1 compromised version
Page 467 of 7,328