Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in increased_mandrill_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_zebra_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_seahorse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_mandrill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_anaconda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_nightingale_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-olive-cockroach (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_owl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_vulture_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in includesec-dependency-confusion (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incomesample (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_coyote_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_bobcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_butterfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_alpaca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_partridge-biggestdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_eel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_walrus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_swordtail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in incom-css (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-aqua-baboon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-green-cuckoo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-peach-panda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_jackal_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_tern_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_cattle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_antelope_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-aquamarine-anteater (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_duck_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_cat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased-rose-hedgehog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_camel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_panther-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in increased_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_guineafowl-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined-black-shrew (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_vulture_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined-aqua-vole (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_sailfish-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in Incheon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_possum_salmon-74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_canidae-biggestdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inc_chickadee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inclined_louse_z3n (npm)
1 compromised version
Page 486 of 7,328