Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inda-fodja-gifaobga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifaiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisugkada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifabga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaiu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifaoobaiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisgda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guof (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodij-gf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofaipa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-go (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisugkda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaoobiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofagipa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisugada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gif (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gif (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifobaiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofipa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-g (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofagiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisuda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaiua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifbaiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifaobaiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodija-gifa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodj-guofagogiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gifaisugda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_coral_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-jade-wolverine (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_stoat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_goose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_cardinal-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_thrush_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-salmon-wolf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-scarlet-lemming (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_mastodon_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_mammal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_albatross_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_perch_white-2 (npm)
1 compromised version
Page 484 of 7,328