Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in icicle-waterfall-wix021-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-koala-yqb603-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-gorilla-nav513-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-reef-dyf367-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-dandelion-odl347-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ico-maker (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-quasar-urh125-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-jade-ysp547-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icon-reactjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-yellow-qva287-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-rainbow-akk321-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-98 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-94 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-88 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-93 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-pyxis-antd-higgs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-84 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-link-config-neutronstar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-85 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-helios-grus-vuetify (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-eventhoriz-grus-non-blocking (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-95 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-less-loader-eigenstate-asthenosphere (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnaea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-phylogenetics-cosmicweb-yaml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icicle-dandelion-ajv970-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-87 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-97 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichartjs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-blueshift-cache-comet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-materialize-neptune-karma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-archaeogenetics-repository-dione (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichnology-ursa-petrology-cluster (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ichigodot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-99 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-83 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-65 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-71 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icha-61 (npm)
1 compromised version
Page 532 of 7,328