Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in imaginative_muskox_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_quokka_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imagelink (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_raven_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_sawfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_lynx_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_cattle_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_locust_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative-amaranth-iguana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_partridge_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imailok-ofe-laaia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_alligator_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_termite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_minnow-notthedev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_mongoose_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_toucan_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imailok-ofe-lanaia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imcloud (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_impala_pink-64 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imailok-ofe-laia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imd-cloud-orders (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imailok-ofe-lanauia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imalok-ofe-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_narwhal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imagif (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaginative_jay_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilstina-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in image-lib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in image_transformations (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilyescroisbshjalilbaguettesant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-54 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilyescroissant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-51 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in image-memory (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaf-fixtures (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imaged (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-33 (npm)
1 compromised version
Page 507 of 7,328