Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Aug 14, 2025
Malicious code in iceberg-icicle-pip930-project (npm)
- Aug 14, 2025
Malicious code in iceberg-grove-wyf494-project (npm)
- Aug 14, 2025
Malicious code in iceberg-gorilla-igfp (npm)
- Aug 14, 2025
Malicious code in iceberg-falcon-vn21 (npm)
- Aug 14, 2025
Malicious code in iceberg-almond-jx84 (npm)
- Aug 14, 2025
Malicious code in ice-y9v7e-pjp3g-solace-project (npm)
- Aug 14, 2025
Malicious code in ice-uud8z-um6ib-uplift-project (npm)
- Aug 14, 2025
Malicious code in ice-templates (npm)
- Aug 14, 2025
Malicious code in ice-fnzvy-v1nyz-lunar-project (npm)
- Aug 14, 2025
Malicious code in ice-e592h-rted6-jade-project (npm)
- Aug 14, 2025
Malicious code in ice-0csyt-uwn4e-xenith-project (npm)
- Aug 14, 2025
Malicious code in icctest (npm)
- Aug 14, 2025
Malicious code in ic-tools-mailer (npm)
- Aug 14, 2025
Malicious code in ic-model-admin (npm)
- Aug 14, 2025
Malicious code in ibslkpaeqczrtgdy (npm)
- Aug 14, 2025
Malicious code in ibfupgadsozeqktw (npm)
- Aug 14, 2025
Malicious code in ibfinder (npm)
- Aug 14, 2025
Malicious code in ibercnudjtysgpfk (npm)
- Aug 14, 2025
Malicious code in ibc (npm)
- Aug 14, 2025
Malicious code in ibantay (npm)
- Aug 14, 2025
Malicious code in ibanan (npm)
- Aug 14, 2025
Malicious code in ibadge (npm)
- Aug 14, 2025
Malicious code in iambtwob (npm)
- Aug 14, 2025
Malicious code in iafwjeqovtmnhcrk (npm)
- Aug 14, 2025
Malicious code in iadvice (npm)
- Aug 14, 2025
Malicious code in i_json (npm)
- Aug 14, 2025
Malicious code in i18next-xlsx-to-json (npm)
- Aug 14, 2025
Malicious code in i-knew-that (npm)
- Aug 14, 2025
Malicious code in hzrbqljeavcsnpkf (npm)
- Aug 14, 2025
Malicious code in hytb3nqln1s0tp3d7ygf2wnl9djb5emc (npm)
- Aug 14, 2025
Malicious code in hyrmedia (npm)
- Aug 14, 2025
Malicious code in hyptrails (npm)
- Aug 14, 2025
Malicious code in hypnosphi (npm)
- Aug 14, 2025
Malicious code in hypngqbzkmwjuiar (npm)
- Aug 14, 2025
Malicious code in hypertheme-matrix (npm)
- Aug 14, 2025
Malicious code in hyperjoy (npm)
- Aug 14, 2025
Malicious code in hyperion-spectron-webdriver-meteor-bulma (npm)
- Aug 14, 2025
Malicious code in hyperion-reveal-md-wasat-ganymede (npm)
- Aug 14, 2025
Malicious code in hyperion-koa-vuepress-zenith (npm)
- Aug 14, 2025
Malicious code in hyperion-graviton-filament-ionosphere (npm)
- Aug 14, 2025
Malicious code in hyperion-element-ui-google-link (npm)
- Aug 14, 2025
Malicious code in hyperion-concurrently-photon-metabolomics (npm)
- Aug 14, 2025
Malicious code in hyperion-buffer-centauri-express (npm)
- Aug 14, 2025
Malicious code in hyperion-baryon-fork-graphql (npm)
- Aug 14, 2025
Malicious code in hypc (npm)
- Aug 14, 2025
Malicious code in hyiot-module (npm)
- Aug 14, 2025
Malicious code in hydrogeology-transform-crust-library (npm)
- Aug 14, 2025
Malicious code in hydrogeology-primatology-galaxy-astrophysics (npm)
- Aug 14, 2025
Malicious code in hydrogeology-event-wezen-eris (npm)
- Aug 14, 2025
Malicious code in hydrogeology-darkmatter-achernar-inquirer (npm)
Page 5995 of 7,325