Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inal-poke95 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke98 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke65 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke66 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke83 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke88 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke93 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke73 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke69 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke53 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke54 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke75 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke99 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke70 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke42 (npm)
1 compromised version
Page 489 of 7,328