Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in impulse-pino-eridanus-release-it (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-panspermia-release-it-europa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguqaidb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-react-bootstrap-gacrux-stream (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-global-octans-jovian (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improveme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-fornax-element-ui-aether (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-sedna-sedna-cryovolcano (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imrp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-ibfua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-altair-iota-avior (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iaib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-igaib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-toml-despina-bootes (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-rimraf-schema-webdriver-manager (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-adonis-lyra-pino-pretty (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-resonance-soap-cryonics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_whale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imuay-agg-iguaib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved-emerald-worm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved-olive-kangaroo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_catshark_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_wolverine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_trout_turquoise-61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_whale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_tahr_sapphire-44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_mockingbird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_cockroach_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved-yellow-booby (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_spoonbill_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_gopher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_antlion-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_mandrill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved-olive-catshark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_spoonbill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_donkey_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved-red-cockroach (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_porpoise_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_shrew_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_giraffe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_dragon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_dingo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_bass_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_weasel_z3n (npm)
1 compromised version
Page 496 of 7,328