Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
330,055 total · sorted newest first- Sep 10, 2026
Malicious code in falcon-meadow-mjg856-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-yambean-1mhv (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-uranium-xyf246-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-nautilus-xni459-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-iceberg-g9hh (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-lightning-gxl169-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcor-hapi-demo (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-meadow-btc304-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-moose-wrp793-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-name (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-ubi69-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tumis94-pore (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-dandelion-ozo954-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-almond-8v6v (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-dove-uoi805-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-apache-with-copyleft-dep (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tumis68-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-twilio (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng42-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fakechat (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-emerald-zce370-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fake-package-agpl-license (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajitas-notthedevs (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fakearray (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-amber-zkm371-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng45-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat93-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-fern-zar747-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-wajit67-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng3-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng49-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe83-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge6-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu69-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe44-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe21-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe59-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat64-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul39-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul35-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul9-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat100-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge26-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe6-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe60-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge91-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge5-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge47-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe61-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe93-miaww (npm)
1 compromised version
Page 5 of 6,602