Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in imodiov-kofi-cuauscdocavgpmoigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kofi-cuauag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kofi-cuaug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kofi-cuauscdocavgmoigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_wolverine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immyth-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_wasp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-olive-octopus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_iguana_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_swallow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-aquamarine-mouse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_rooster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_angelfish-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_seahorse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdocavgopmoigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-gray-boar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_puma_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_yak_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_crayfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuagbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_urial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_harrier_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_wildcat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdocavgopigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_wasp_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_jay_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_pheasant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_cephalopod_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_puffin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_otter_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdocavgoigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_bandicoot-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdocavgigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuaugbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_dragonfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-turquoise-clownfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_otter_yellow-52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_toad_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-coral-python (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_lungfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_urial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-blush-amphibian (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_piranha_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_tarantula_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_beaver_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_tapir-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense_marsupial_dumbs (npm)
1 compromised version
Page 505 of 7,328