Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in imnaf-safif-cuagu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immense-brown-elk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imodiov-kfi-cuauscdocaigbl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_magpie_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_manatee_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_ermine_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imefcf-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_halibut_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_cardinal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_crayfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate-olive-anglerfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imgame (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_lamprey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_egret-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate-yellow-swift (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_pigeon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imezrgkgbudyvzuucbjg0aadho2oir0l (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imdbpro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate-bronze-pike (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_platypus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate-cyan-flamingo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_badger_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_coral_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imgretom (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_caribou_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_gopher_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_antlion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imgcycle (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_amphibian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imecon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_chicken_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in img-region-select-app (npm)
1 compromised version
- Sep 13, 2026
Malicious code in immediate_eel_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imhforms (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_elk_maroon-63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imalok-ofe-ai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_condor_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_mackerel_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imailok-ofe-aia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_moth_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_echidna_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative-tomato-wildfowl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_fly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_muskox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_quokka_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imagelink (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_raven_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_sawfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_lynx_z3n (npm)
1 compromised version
Page 506 of 7,328