Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Aug 14, 2025
Malicious code in igamma (npm)
- Aug 14, 2025
Malicious code in ig.gfx.solid (npm)
- Aug 14, 2025
Malicious code in ifunfacts (npm)
- Aug 14, 2025
Malicious code in iftads (npm)
- Aug 14, 2025
Malicious code in ifrtlaxcjygzqenk (npm)
- Aug 14, 2025
Malicious code in iframed (npm)
- Aug 14, 2025
Malicious code in ifm-length (npm)
- Aug 14, 2025
Malicious code in iflix-portal (npm)
- Aug 14, 2025
Malicious code in ifbyphone (npm)
- Aug 14, 2025
Malicious code in iezfumgcxaotnphd (npm)
- Aug 14, 2025
Malicious code in ieubpm (npm)
- Aug 14, 2025
Malicious code in ienroll (npm)
- Aug 14, 2025
Malicious code in iekgzqbacdrwslok (npm)
- Aug 14, 2025
Malicious code in iejgdnlfvpkbcuxa (npm)
- Aug 14, 2025
Malicious code in ieee-mcoe-ts-cordova (npm)
- Aug 14, 2025
Malicious code in idsyao (npm)
- Aug 14, 2025
Malicious code in idshjyvoguaxfpnc (npm)
- Aug 14, 2025
Malicious code in idnpoker (npm)
- Aug 14, 2025
Malicious code in idms-web-components (npm)
- Aug 14, 2025
Malicious code in idlgkxebvqnarmow (npm)
- Aug 14, 2025
Malicious code in idig-solus (npm)
- Aug 14, 2025
Malicious code in idig-openstack (npm)
- Aug 14, 2025
Malicious code in idig-onapp (npm)
- Aug 14, 2025
Malicious code in idid-db (npm)
- Aug 14, 2025
Malicious code in idfastq (npm)
- Aug 14, 2025
Malicious code in idexx-spot (npm)
- Aug 14, 2025
Malicious code in identitydocumentserv (npm)
- Aug 14, 2025
Malicious code in identity_cache (npm)
- Aug 14, 2025
Malicious code in identity-frontend-common (npm)
- Aug 14, 2025
Malicious code in identifications (npm)
- Aug 14, 2025
Malicious code in idempotent-json (npm)
- Aug 14, 2025
Malicious code in idelfonso-package (npm)
- Aug 14, 2025
Malicious code in idelfonso-first-npm (npm)
- Aug 14, 2025
Malicious code in ideedz (npm)
- Aug 14, 2025
Malicious code in ideatome (npm)
- Aug 14, 2025
Malicious code in idealmap (npm)
- Aug 14, 2025
Malicious code in ideainvest-component-library (npm)
- Aug 14, 2025
Malicious code in ide-stubs (npm)
1 compromised version
- Aug 14, 2025
Malicious code in idaddon (npm)
- Aug 14, 2025
Malicious code in ida-ubi47-breki (npm)
- Aug 14, 2025
Malicious code in ida-tempe89-breki (npm)
- Aug 14, 2025
Malicious code in ida-teh81-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-tahu92-kuki (npm)
- Aug 14, 2025
Malicious code in ida-sroto52-breki (npm)
- Aug 14, 2025
Malicious code in ida-naget41-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-lapis56-breki (npm)
- Aug 14, 2025
Malicious code in ida-kue29-breki (npm)
- Aug 14, 2025
Malicious code in ida-enting60-sukiwir (npm)
- Aug 14, 2025
Malicious code in ida-dodol25-breki (npm)
- Aug 14, 2025
Malicious code in id-cookies (npm)
Page 5993 of 7,325