Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inagi-vumaf-nag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nagfufu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nabfufasia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke116 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke102 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke120 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nabfufs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke117 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-nabfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuubag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke118 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nunfubag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-nabfufsia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke109 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-na (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumayfe-naya (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumafe-nauu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke111 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke104 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-nagafuu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vumaf-nagfu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke113 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inal-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_basilisk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_grasshopper_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-tomato-ocelot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagbaifvua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_cod_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nubi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagiua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_quail_replicate_automation (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_ant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nubag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nuagbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-gvama-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_parrot_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-govama-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_jay-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagivua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nuagbarifvua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-gvma-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-bronze-kangaroo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_tapir_z3n (npm)
1 compromised version
Page 491 of 7,328