Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ifrai-igafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifargfai-igafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iekgzqbacdrwslok (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifarfai-igafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood-docusaurus-theme (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifunfacts (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifarfi-gafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iflix-portal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iframed (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ieubpm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ig-grunt-file-list (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifrtlaxcjygzqenk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ieee-mcoe-ts-cordova (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iftads (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood-faster-remote-config (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifafi-gafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iemefd-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ifood-bank-account-validator-redux-form-8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idme-component-utilities (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_rat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_marlin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_koi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_jay_magenta-56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idig-onapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_hamster_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_panther_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_fowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ido-sdk-web (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_dolphin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_bandicoot_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idexx-spot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idreesafzal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_turtle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_starfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_wolverine-notthedev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idig-openstack (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_kangaroo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_viper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idreesameen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idid-db (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idreesabdul (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idlgkxebvqnarmow (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idms-web-components (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_koala_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_lark_chocolate-46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idnpoker (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idfastq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_cheetah_z3n (npm)
1 compromised version
Page 516 of 7,328