Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,222 total · sorted newest first- Aug 14, 2025
Malicious code in infinity-sunset-qsh049-project (npm)
- Aug 14, 2025
Malicious code in infinity-river-xpr242-project (npm)
- Aug 14, 2025
Malicious code in infinity-rainbow-lfq530-project (npm)
- Aug 14, 2025
Malicious code in infinity-peacock-qvy720-project (npm)
- Aug 14, 2025
Malicious code in infinity-lightning-lij114-project (npm)
- Aug 14, 2025
Malicious code in infinity-iceberg-pxa717-project (npm)
- Aug 14, 2025
Malicious code in infinity-aspen-ikd431-project (npm)
- Aug 14, 2025
Malicious code in inferno-zest-3vjl (npm)
- Aug 14, 2025
Malicious code in inferno-zeppelin-po2r (npm)
- Aug 14, 2025
Malicious code in inferno-yacht-pcs1 (npm)
- Aug 14, 2025
Malicious code in inferno-titan-4nsz (npm)
- Aug 14, 2025
Malicious code in inferno-helicopter-l4v2 (npm)
- Aug 14, 2025
Malicious code in inferno-eagle-i75z (npm)
- Aug 14, 2025
Malicious code in inferno-deciduous-eykx (npm)
- Aug 14, 2025
Malicious code in infamy (npm)
- Aug 14, 2025
Malicious code in inexor-tree (npm)
- Aug 14, 2025
Malicious code in inengine (npm)
- Aug 14, 2025
Malicious code in ineldua (npm)
- Aug 14, 2025
Malicious code in industr (npm)
- Aug 14, 2025
Malicious code in indus-xerxes-hermes-electron (npm)
- Aug 14, 2025
Malicious code in indus-postgres-avior-node-config (npm)
- Aug 14, 2025
Malicious code in indus-io-prettier-stylelint-cygnus (npm)
- Aug 14, 2025
Malicious code in indizio (npm)
- Aug 14, 2025
Malicious code in indigo_z3u10_4rpwx_vista (npm)
- Aug 14, 2025
Malicious code in indigo_vfsca_sg7uv_willow (npm)
- Aug 14, 2025
Malicious code in indigo_rgiqq_vnnwe_glacier (npm)
- Aug 14, 2025
Malicious code in indigo_qzrd8_rr7y6_driftwood (npm)
- Aug 14, 2025
Malicious code in indigo_atzug_mqey4_lunar (npm)
- Aug 14, 2025
Malicious code in indigo_02i5p_kkrqj_xylophone (npm)
- Aug 14, 2025
Malicious code in indigo-wbimi-zf1d4-vortex-project (npm)
- Aug 14, 2025
Malicious code in indigo-lrk6k-y1ei4-nova-project (npm)
- Aug 14, 2025
Malicious code in india-zucchini-romeo-vvqdk (npm)
- Aug 14, 2025
Malicious code in india-yankee-wnki (npm)
- Aug 14, 2025
Malicious code in india-xyb-project (npm)
- Aug 14, 2025
Malicious code in india-xigua-mojx (npm)
- Aug 14, 2025
Malicious code in india-xigua-grape-fsony (npm)
- Aug 14, 2025
Malicious code in india-w82-project (npm)
- Aug 14, 2025
Malicious code in india-vanilla-kuqz (npm)
- Aug 14, 2025
Malicious code in india-uniform-idtv (npm)
- Aug 14, 2025
Malicious code in india-underpass-cna5 (npm)
- Aug 14, 2025
Malicious code in india-ugli-akih (npm)
- Aug 14, 2025
Malicious code in india-u7j-project (npm)
- Aug 14, 2025
Malicious code in india-to8-project (npm)
- Aug 14, 2025
Malicious code in india-tangerine-vcki (npm)
- Aug 14, 2025
Malicious code in india-tangerine-tygs (npm)
- Aug 14, 2025
Malicious code in india-strawberry-yam-fhydd (npm)
- Aug 14, 2025
Malicious code in india-strawberry-hotel-isgee (npm)
- Aug 14, 2025
Malicious code in india-strawberry-banana-vqdib (npm)
- Aug 14, 2025
Malicious code in india-sierra-papaya-hixcq (npm)
- Aug 14, 2025
Malicious code in india-sierra-bhsm (npm)
Page 5989 of 7,325