Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ideal_vulture_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idelfonso-package (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_bird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_piranha_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_guppy_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idaasfinancialnodeserv (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_gerbil_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_lamprey-apptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideatome (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ide-stubs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-ivory-wolverine (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical_alpaca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_hare-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_stingray_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_boa_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_impala_salmon-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_walrus_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_blackbird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_quelea_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idealmap (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-ivory-peafowl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_harrier_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-teal-capybara (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idcs-dialog (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_crocodile_blue-74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idaddon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_snake_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idelfonso-first-npm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideedz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-black-squid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_buzzard_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in idempotent-json (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_wolverine-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ideal_clownfish-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-copper-caribou (npm)
1 compromised version
- Sep 13, 2026
Malicious code in identical-purple-kangaroo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-wajit43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-wajit49-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe89-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tomat16-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-wajit79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tiwul30-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tomat33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tomat41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tomat2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tiwul32-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tomat73-ruro (npm)
1 compromised version
Page 518 of 7,328