Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inagi-vma-nuabi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in in-process-engine (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_sparrow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagifvua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nuagbarifvua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_emu-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nunafubag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_tern_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nuagbri (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_barracuda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nuagbarifu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in in.juspay.dotp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_quail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-gotvama-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_krill_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nunabag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-ng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vuma-nnag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_zebra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-harlequin-jay (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imunify-plugin-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_chipmunk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate_dinosaur_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inagi-vma-nuagbarif (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dagi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfnu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvoig-daicutafamajjauak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-teal-shrimp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfnupa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daiugadajuij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daiugadajdufij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamnfaiyugpa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daijuj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfnfaiyugpa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafgoacvigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dniemnfa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafacigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-di (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-indigo-parrot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daiajuj (npm)
1 compromised version
Page 492 of 7,328