Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in igsxneyqtowhzjlv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igsboloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-quagmire-bsc096-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igwinit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-cascade-inq333-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-whirlpool-mpq809-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iife-sample (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-ecosystem-iuc520-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-koala-rti604-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igwutil-yy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihm-js-coral-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-bonfire-ahx736-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-quilt-auy683-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iilinks (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iherb-react-environment (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-umbra-khi789-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-xenon-zqq461-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-igloo-apj537-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihbonxreqvcdwuzl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihfznoakvwluqcpg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihavedone (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihealthlibrary-react-native (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-xenos-uglify-js-hugo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihooker (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-event-electron-testcafe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-private-cosmos-nuxtjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-pm2-postcss-transform (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-foundation-cluster-spinner (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-izar-hyperion-gatsby (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-stop-superflare-rate-limiter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-mira-dione-cz-conventional-changelog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-halley-jovian-flare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-package-axios-bootstrap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-puppeteer-sedna-rimraf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-request-bulma-thuban (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-hermes-ophiuchus-semantic-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-jekyll-europa-galaxy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-spawn-fornax-umbriel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-puppeteer-procyon-vortex (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-leda-framework-superagent (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-supervisor-mocha-polaris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-cosmicray-accretion-altair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-jabbah-betelgeuse-pavo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-paleoceanography-lightyear-rimraf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-rest-exec-sedimentology (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-rehype-xo-cypress (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-sqlite-celeste-sass-loader (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-terser-semantic-release-exec (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-configstore-morgan-kastra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-morgan-postcss-loader-morgan (npm)
1 compromised version
Page 514 of 7,328