Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in illusion_vc0tp_1fp86_paradise (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilmxzkyhrojgfwcv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_whitefish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilop-16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_dinosaur-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_snail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_minnow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_dinosaur_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_reindeer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_impala_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_wildfowl-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_snake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_sparrow_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_llama_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_beaver_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-copper-bobcat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_lamprey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-silver-centipede (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_coyote_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_dragonfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-sapphire-asp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-cyan-sailfish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_monkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_ptarmigan_tan-52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_sheep_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_reptile_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_hornet_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-azure-vole (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-aqua-hornet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_gayal_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_salamander_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_puffin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_squid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_owl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_marsupial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal-amber-aardwolf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_shrew_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_marlin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_landfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_manatee_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ill_lion_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in illegal_angelfish_z3n (npm)
1 compromised version
Page 509 of 7,328