Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in increasing_cockroach_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible-violet-wasp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible-cyan-jellyfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_marsupial_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_coral-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_rattlesnake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_wolf_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_snail-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incrmean (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_peafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-scarlet-orangutan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_manatee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_orca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_echidna-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-lime-trout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible-aqua-wolf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_caribou_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_clownfish_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_caribou-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_jay_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_wasp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_gopher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_crocodile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_bee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_earwig_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_limpet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_whale_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_nightingale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_snake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_flamingo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_angelfish-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_landfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_salmon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_pony_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_marsupial_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_python_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_coral_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_gazelle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incrowd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible_llama_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible-orange-orca (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incredible-sapphire-mongoose (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing_pheasant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-indigo-frog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-beige-mongoose (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-cyan-marmoset (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increasing-harlequin-chickadee (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_sparrow_z3n (npm)
1 compromised version
Page 485 of 7,328