Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Aug 14, 2025
Malicious code in impulse-vortex-writable-blaze (npm)
- Aug 14, 2025
Malicious code in impulse-resonance-soap-cryonics (npm)
- Aug 14, 2025
Malicious code in impulse-panspermia-release-it-europa (npm)
- Aug 14, 2025
Malicious code in impulse-mesosphere-standard-morgan (npm)
- Aug 14, 2025
Malicious code in impulse-cluster-gravitationalwave-resolvers (npm)
- Aug 14, 2025
Malicious code in improveme (npm)
- Aug 14, 2025
Malicious code in impresora (npm)
- Aug 14, 2025
Malicious code in import-user-reject-decode-async (npm)
- Aug 14, 2025
Malicious code in import-process-orchestrate-stub-phi (npm)
- Aug 14, 2025
Malicious code in import-omega-star-compress-wind (npm)
- Aug 14, 2025
Malicious code in import-mysql (npm)
- Aug 14, 2025
Malicious code in import-grep-void-await-minify (npm)
- Aug 14, 2025
Malicious code in import-cron-test-decompress-log (npm)
- Aug 14, 2025
Malicious code in import-big-runtime-permission-web (npm)
- Aug 14, 2025
Malicious code in impinj-is-tool (npm)
- Aug 14, 2025
Malicious code in impertinent (npm)
- Aug 14, 2025
Malicious code in impermute (npm)
- Aug 14, 2025
Malicious code in imovieapp (npm)
- Aug 14, 2025
Malicious code in imhforms (npm)
- Aug 14, 2025
Malicious code in imgretom (npm)
- Aug 14, 2025
Malicious code in imgcycle (npm)
- Aug 14, 2025
Malicious code in imgame (npm)
- Aug 14, 2025
Malicious code in imezrgkgbudyvzuucbjg0aadho2oir0l (npm)
- Aug 14, 2025
Malicious code in imecon (npm)
- Aug 14, 2025
Malicious code in imdbpro (npm)
- Aug 14, 2025
Malicious code in imd-cloud-orders (npm)
- Aug 14, 2025
Malicious code in imcloud (npm)
- Aug 14, 2025
Malicious code in imagif (npm)
- Aug 14, 2025
Malicious code in imagelink (npm)
- Aug 14, 2025
Malicious code in imagedump (npm)
- Aug 14, 2025
Malicious code in imaged (npm)
- Aug 14, 2025
Malicious code in imagecalc (npm)
- Aug 14, 2025
Malicious code in image_transformations (npm)
- Aug 14, 2025
Malicious code in image-lib (npm)
- Aug 14, 2025
Malicious code in imaf-fixtures (npm)
- Aug 14, 2025
Malicious code in ilxs1q (npm)
- Aug 14, 2025
Malicious code in ilmxzkyhrojgfwcv (npm)
- Aug 14, 2025
Malicious code in illusion_yxjqr_guvw9_ember (npm)
- Aug 14, 2025
Malicious code in illusion_vc0tp_1fp86_paradise (npm)
- Aug 14, 2025
Malicious code in illusion_sirr0_yuxo9_zodiac (npm)
- Aug 14, 2025
Malicious code in illusion_d6ark_5gyai_topaz (npm)
- Aug 14, 2025
Malicious code in illusion_cuzcm_lsk2z_glow (npm)
- Aug 14, 2025
Malicious code in illusion_89muf_zzaa7_fern (npm)
- Aug 14, 2025
Malicious code in illusion_737g5_aqmrb_xenon (npm)
- Aug 14, 2025
Malicious code in illume-luminous-zot917-project (npm)
- Aug 14, 2025
Malicious code in illume-hum-fhb242-project (npm)
- Aug 14, 2025
Malicious code in ilikerun (npm)
- Aug 14, 2025
Malicious code in iletouhkxqfvknwc (npm)
- Aug 14, 2025
Malicious code in ilaaas (npm)
- Aug 14, 2025
Malicious code in ikvqlxtofwbzeknc (npm)
Page 5991 of 7,325