Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ideological_chameleon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idig-solus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_mosquito_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_dragonfly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_boa_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological_wallaby_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_marten_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity-auth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_bonobo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_moth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-emerald-lemur (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-peach-scallop (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_piranha_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_flyingfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_mollusk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity-frontend-common (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_lungfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_dolphin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identifications (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_rattlesnake_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_opossum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity_cache (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_piranha_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-amethyst-seahorse (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_scallop_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_mouse_aquamarine-62 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_cattle_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-azure-hippopotamus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity-web (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_mule_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity-emitter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_stork_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_whippet_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_tarantula_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identity-authn-core-ui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identitydocumentserv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_barracuda_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_wallaby_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_loon_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_reindeer_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_mouse_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-scarlet-camel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-yellow-wildcat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_canidae_tomato-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideological-amaranth-trout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-beige-raven (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-apricot-kangaroo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_skunk_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideainvest-component-library (npm)
1 compromised version
Page 517 of 7,328