Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,392 total · sorted newest first- Sep 13, 2026
Malicious code in ican-poke77 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke68 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke75 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke66 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke72 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke76 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke70 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke51 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke37 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke106 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke100 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibufa-otaitu-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke105 (npm)
1 compromised version
Page 536 of 7,328