Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Aug 14, 2025
Malicious code in fusion-theme (npm)
- Aug 14, 2025
Malicious code in fusion-starter-build-scripts (npm)
- Aug 14, 2025
Malicious code in fusion-starter (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-urate (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-tracer (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-tchannel (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-secure-headers (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-secrets (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-s3-asset-proxying (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-rosetta (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-m3-react (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-logtron-react (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-heatpipe (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-google-analytics-react (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-galileo (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-flipr (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-auth-headers (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-atreyu (npm)
- Aug 14, 2025
Malicious code in fusion-plugin-analytics-session (npm)
- Aug 14, 2025
Malicious code in fusion-node-config-parsec-glaciology (npm)
- Aug 14, 2025
Malicious code in fusion-dev-cli (npm)
- Aug 14, 2025
Malicious code in fusion-codemods (npm)
- Aug 14, 2025
Malicious code in furhwslaejpygtbz (npm)
- Aug 14, 2025
Malicious code in funrun (npm)
- Aug 14, 2025
Malicious code in funout (npm)
- Aug 14, 2025
Malicious code in funnygame (npm)
- Aug 14, 2025
Malicious code in funnel-fragment (npm)
- Aug 14, 2025
Malicious code in funlayer (npm)
- Aug 14, 2025
Malicious code in funforday (npm)
- Aug 14, 2025
Malicious code in fundingpolicy-paypal (npm)
- Aug 14, 2025
Malicious code in fundify (npm)
- Aug 14, 2025
Malicious code in function-new-alert-visualize-compile (npm)
- Aug 14, 2025
Malicious code in funcoes-estatisticas.js (npm)
- Aug 14, 2025
Malicious code in funcconf (npm)
- Aug 14, 2025
Malicious code in funbox-frontend-env-gulp (npm)
- Aug 14, 2025
Malicious code in funbox-frontend-env-angular (npm)
- Aug 14, 2025
Malicious code in funbill (npm)
- Aug 14, 2025
Malicious code in funbeca (npm)
- Aug 14, 2025
Malicious code in fumseck (npm)
- Aug 14, 2025
Malicious code in fullypwnd (npm)
- Aug 14, 2025
Malicious code in fullscreen-card-renderer (npm)
- Aug 14, 2025
Malicious code in fullcube-webhooks-incoming (npm)
- Aug 14, 2025
Malicious code in fullcube-recurly-refresh (npm)
- Aug 14, 2025
Malicious code in fullcube-angular-base (npm)
- Aug 14, 2025
Malicious code in fuji-css (npm)
- Aug 14, 2025
Malicious code in fuimonos (npm)
- Aug 14, 2025
Malicious code in fugaplug (npm)
- Aug 14, 2025
Malicious code in fuffer-xor (npm)
- Aug 14, 2025
Malicious code in fuffamail (npm)
- Aug 14, 2025
Malicious code in fuctioons (npm)
Page 6031 of 7,324