Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in impertinent (npm)
1 compromised version
- Sep 13, 2026
Malicious code in implicit_boar_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in implicit_ladybug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in implicit_cardinal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in implicit-white-kingfisher (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_fox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_chimpanzee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafegadad (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafacevavisvoetfamolcaba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafegada (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial-aquamarine-bedbug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_roundworm_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_squirrel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_reindeer_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial-maroon-dolphin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_beaver_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_jackal_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_mule_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_spoonbill_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodra-fuoa-janur (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_dog_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_squid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafegxadad (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_primate-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial-cyan-raccoon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafegaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_rattlesnake-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_wildfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_chipmunk_yellow-21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_butterfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafega (npm)
1 compromised version
- Sep 13, 2026
Malicious code in impermute (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_viper_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial-orange-bird (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_gopher_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_shrimp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_leopon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imovieapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafacevavisvoetfamolcabyca (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_whippet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imperial_sturgeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-ofi-cafacevavisvmolcabyca (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafacevavisvoetfamola (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-caa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kufni-uavcseqinsdayaba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-omfi-cafacevaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kufni-uavcseqaaba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kufni-ufavcseqinsdaodatayctaban (npm)
1 compromised version
Page 500 of 7,328