Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in imuay-agg-iguqakuidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-aig-iyuag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iyug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-ig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguqakuraduidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguqakuuidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-iguqb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-aig-iyucauaugayafg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-iyucauaufg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iayac (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iay (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-iguqakuradidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-aig-iyucauauggayafg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-iyucauaugafg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-aig-iyucauagyafg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iayafucaamrfuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-avig-iyg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agig-iyucauaugaafg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguqakuaduidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-event-stop-celeste (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-dorado-kinetic-loglevel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-eslint-config-zenobia-octans (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imrpjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-sirius-quantum-local (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-dependencies-spinner-figures (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-ibifua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-mesosphere-standard-morgan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-protractor-registry-reveal-md (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-ibua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imsbench (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-chalk-browserify-loopback (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-fornax-mensa-process (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-blaze-yonder-eleventy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-dotenv-safe-prompts-miranda (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imtiazkhalid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imrp-sandbox (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-dorado-despina-celeste (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-figures-inquirer-oortcloud (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-node-sass-private-vuetify (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-holography-grunt-sequelize (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguaidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-vortex-writable-blaze (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-hugo-hermes-tailwindcss (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-atlas-nightwatch-venus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-gemini-epimetheus-neptune (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-ib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-mdx-quantum-nextjs (npm)
1 compromised version
Page 495 of 7,328