Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,487 total · sorted newest first- Sep 13, 2026
Malicious code in helpless_pinniped_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_tiglon_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_rodent_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_unicorn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helptools (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso19-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso80-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_wren_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan8-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_monkey_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan22-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hemantrao (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brengkes46-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso26-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helptml (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_puma_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_goat_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_rabbit_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_clownfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless-scarlet-worm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_termite_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_kiwi_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_caterpillar-silentdev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_fowl_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_marlin_dumbs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_mackerel_0xrequest (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_guineafowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_manatee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_cobra_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_opossum_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_giraffe_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless-aqua-ocelot (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless-plum-jackal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_wildfowl_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_viper_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_duck_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_ant_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_anaconda_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_firefly_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_beaver_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_thrush_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_jellyfish_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_egret_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_ptarmigan-appteadev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_horse_scarlet-6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpful_manatee_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_cockroach_z3n (npm)
1 compromised version
Page 596 of 7,330