Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inal-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke37 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-naguu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nunag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-naba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke114 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke119 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nunbag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-nagafufu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke101 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke121 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nafus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-nagafu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke107 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-ng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-naaya (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nabfufas (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke100 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-nagu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke112 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke103 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke110 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke108 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-nabfuia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-nafaya (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke115 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nagafufu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke105 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke106 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-nabfufasia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nafufs (npm)
1 compromised version
Page 490 of 7,328