Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in icy_cuckoo_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_firefly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_jackal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_egret_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_dinosaur_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_cheetah_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_flyingfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-sapphire-bat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icoreact (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-amaranth-otter (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_canid_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-sapphire-zebra (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-blush-fowl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icornr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-copper-cougar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-amber-jay (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ictvapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iconuk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iconfront (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_blackbird_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iconfont-consumer-paypal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icu-messageformat (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_bedbug_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iconicwp-website (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-violet-earwig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icons-generator (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iconpark (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_aardwolf_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-lavender-hoverfly (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy-black-goose (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icon-service (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_amphibian_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-utopia-hld871-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-kale-sea780-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icon-sea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-yucca-jur519-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-myth-xgn480-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icims-express-dot-engine (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icomm-mobile (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icondepan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-leopard-gxz071-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-topaz-ltb727-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iclaim (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-honeycomb-qtz954-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-iris-rqm905-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icogsci (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-lightning-feb821-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-eagle-zga550-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-moon-zdu476-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-kaleidoscope-tdl275-project (npm)
1 compromised version
Page 531 of 7,328