Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ignite-jovian-carpo-ganymede (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-stop-castor-triton (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-cosmos-nova-farout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-nodemon-antares-publish (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-commitlint-config-angular-iota-corvus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-chai-mira-neptune (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-mountain-seb898-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igibloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-mangrove-aim739-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ig-phantomjs-binaries (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-callback-node-config-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igisiboloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-ant-lua338-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-unicorn-ebi949-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ig.gfx.solid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-ceres-element-ui-rollup (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ig-grunt-release (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-babel-juno-wezen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-pinnacle-uxm771-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-zenith-pkf567-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-frost-jrf806-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-cassini-polaris-module (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igisboloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-jewel-vwx081-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-november-uve9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-callback-cosmochemistry-paleobotany (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-caravan-rjc896-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-dune-rma443-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igloo-dewdrop-xki089-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igamma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igboloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in igen-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idshjyvoguaxfpnc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iezfumgcxaotnphd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifargafai-igafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood2-github-io (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ie3-ihm-lib-ngx (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifbyphone (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idsyao (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood-github-io (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idreesfaheem (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idreesfarooq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ienroll (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iejfaa-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifargafi-gafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iejgdnlfvpkbcuxa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood-consumer-help-v2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifargafai-gafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifm-length (npm)
1 compromised version
Page 515 of 7,328