Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in improved_hare_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_raccoon-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_leech_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_gayal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_mink_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_parakeet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_newt_yellow-96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_mink_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in improved_tick_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_swordfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_fish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_lungfish-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive-red-panther (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_damselfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive-cyan-dingo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impresora (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_impala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_aphid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive-azure-lynx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed-bronze-swordfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_fly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed-magenta-bovid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_dove_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_landfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_lion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_caterpillar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_mongoose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_bedbug_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_cephalopod_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_wolverine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_mandrill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_rat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_coral_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_muskox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_gibbon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_shrew_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_antlion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_hippopotamus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed-gold-lark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_gecko-smiletea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_crow_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_lemming_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_ptarmigan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_hawk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_hornet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impossible_junglefowl_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive_barracuda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressive-amaranth-mackerel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impressed_porpoise_z3n (npm)
1 compromised version
Page 497 of 7,328