Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,222 total · sorted newest first- Aug 14, 2025
Malicious code in instantly-ark-survival-primal-pass-generator (npm)
- Aug 14, 2025
Malicious code in instance-detect-paypal (npm)
- Aug 14, 2025
Malicious code in installments (npm)
- Aug 14, 2025
Malicious code in install-zenobia-convict-backend (npm)
- Aug 14, 2025
Malicious code in install-paychex-deps (npm)
- Aug 14, 2025
Malicious code in install-module (npm)
- Aug 14, 2025
Malicious code in install-meteor-webdriver-mocha-framework (npm)
- Aug 14, 2025
Malicious code in install-ganymede-avior-morgan (npm)
- Aug 14, 2025
Malicious code in instal (npm)
- Aug 14, 2025
Malicious code in instadown (npm)
- Aug 14, 2025
Malicious code in instacarro-sellers-appointments-api (npm)
- Aug 14, 2025
Malicious code in inspired (npm)
- Aug 14, 2025
Malicious code in insercol (npm)
- Aug 14, 2025
Malicious code in inquizit (npm)
- Aug 14, 2025
Malicious code in innovid-ui (npm)
- Aug 14, 2025
Malicious code in innogames (npm)
- Aug 14, 2025
Malicious code in innocoder (npm)
- Aug 14, 2025
Malicious code in innocms (npm)
- Aug 14, 2025
Malicious code in innobute (npm)
- Aug 14, 2025
Malicious code in inno-pubsub (npm)
- Aug 14, 2025
Malicious code in innmind (npm)
- Aug 14, 2025
Malicious code in innercore-solis-plutology-entanglement (npm)
- Aug 14, 2025
Malicious code in innercore-phoebe-quasar-atlas (npm)
- Aug 14, 2025
Malicious code in innercore-betelgeuse-primatology-auth (npm)
- Aug 14, 2025
Malicious code in injectapp-org-injection-of-apps-and-news900 (npm)
- Aug 14, 2025
Malicious code in init-rest-xenos-fork (npm)
- Aug 14, 2025
Malicious code in init-enceladus-magnetosphere-registry (npm)
- Aug 14, 2025
Malicious code in ini-dactyl-xo-perseus (npm)
- Aug 14, 2025
Malicious code in inhunmi (npm)
- Aug 14, 2025
Malicious code in infrated (npm)
- Aug 14, 2025
Malicious code in infrastructure-lib (npm)
- Aug 14, 2025
Malicious code in infra-kafka-agent (npm)
- Aug 14, 2025
Malicious code in infotree (npm)
- Aug 14, 2025
Malicious code in infocoin (npm)
- Aug 14, 2025
Malicious code in info-sanitize-shell-omicron-thread (npm)
- Aug 14, 2025
Malicious code in info-gamma-eta-xi-cluster (npm)
- Aug 14, 2025
Malicious code in info-export-double-refactor-table (npm)
- Aug 14, 2025
Malicious code in info-compile-cron-rho-export (npm)
- Aug 14, 2025
Malicious code in info-air-monitor-deserialize-bad (npm)
- Aug 14, 2025
Malicious code in inflation-yakutsk-json-perseus (npm)
- Aug 14, 2025
Malicious code in inflation-nova-asteroid-hermes (npm)
- Aug 14, 2025
Malicious code in infinity_yv9q0_sr1ak_quiver (npm)
- Aug 14, 2025
Malicious code in infinity_jxiyh_0eh19_nova (npm)
- Aug 14, 2025
Malicious code in infinity_jbre7_244gf_molecule (npm)
- Aug 14, 2025
Malicious code in infinity_7vg3m_avwx5_yonder (npm)
- Aug 14, 2025
Malicious code in infinity_6njel_jxp8p_vantage (npm)
- Aug 14, 2025
Malicious code in infinity_3pc8h_welvy_voyage (npm)
- Aug 14, 2025
Malicious code in infinity_08wsx_hzyhp_vantage (npm)
- Aug 14, 2025
Malicious code in infinity-xenon-cci996-project (npm)
- Aug 14, 2025
Malicious code in infinity-umbrella-dfb436-project (npm)
Page 5988 of 7,325