Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,392 total · sorted newest first- Sep 13, 2026
Malicious code in ican-poke102 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ic-tools-mailer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke109 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke107 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ic-model-admin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke108 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke103 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke101 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke111 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke110 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke104 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ican-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibrahimabdul (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibfa-otaitu-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-user (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-parser (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-oauth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-sync (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibrahimasbneem (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-payment (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibslkpaeqczrtgdy (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibfupgadsozeqktw (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibrahimnabeel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-model (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibrahimazeem (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-tools (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibfinder (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-utils (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-tests (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-service (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibrahimameen (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-sdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-auth (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-connect (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-logger (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-internal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-gateway (npm)
1 compromised version
Page 537 of 7,328