Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in frizbot (npm)
- Aug 14, 2025
Malicious code in friendlys (npm)
- Aug 14, 2025
Malicious code in frhqojsevxlugnim (npm)
- Aug 14, 2025
Malicious code in freightsmb-frontend (npm)
- Aug 14, 2025
Malicious code in freexue (npm)
- Aug 14, 2025
Malicious code in freetale (npm)
- Aug 14, 2025
Malicious code in freesand (npm)
- Aug 14, 2025
Malicious code in freerte-webpack-config (npm)
- Aug 14, 2025
Malicious code in freerte-paste-plugin (npm)
- Aug 14, 2025
Malicious code in freerte-cut-plugin (npm)
- Aug 14, 2025
Malicious code in freerte-copy-plugin (npm)
- Aug 14, 2025
Malicious code in freeplane (npm)
- Aug 14, 2025
Malicious code in freenger (npm)
- Aug 14, 2025
Malicious code in freemdm (npm)
- Aug 14, 2025
Malicious code in freemaid (npm)
- Aug 14, 2025
Malicious code in freefroot (npm)
- Aug 14, 2025
Malicious code in freefem (npm)
- Aug 14, 2025
Malicious code in freebsd (npm)
- Aug 14, 2025
Malicious code in freeaml (npm)
- Aug 14, 2025
Malicious code in free-xbox-codes-app001 (npm)
- Aug 14, 2025
Malicious code in free-vbucks-fortnite-2023-april-efkzd (npm)
- Aug 14, 2025
Malicious code in free-unlimited-fortnite-vbucks-april-2023-dkdzdz (npm)
- Aug 14, 2025
Malicious code in free-spins-in-coin-master-today-only-jdzdza (npm)
- Aug 14, 2025
Malicious code in free-spins-in-coin-master-2023-working-free-spins-jkdz (npm)
- Aug 14, 2025
Malicious code in free-robux (npm)
- Aug 14, 2025
Malicious code in free-gems-and-passes-on-episode---part-6 (npm)
- Aug 14, 2025
Malicious code in free-fortnite-vbucks-march-2023-updated-djkzez (npm)
- Aug 14, 2025
Malicious code in free-fortnite-vbucks-in-march-2023-updated-and-working-rekgek (npm)
- Aug 14, 2025
Malicious code in free-coin-master-spins-2023-ererzr (npm)
- Aug 14, 2025
Malicious code in free-codes-fortnite-2023-for-free-updated-tricks (npm)
- Aug 14, 2025
Malicious code in frantic-time-thread (npm)
- Aug 14, 2025
Malicious code in frankly-components (npm)
- Aug 14, 2025
Malicious code in framwrk (npm)
- Aug 14, 2025
Malicious code in framework-webdriver-manager-init-virgo (npm)
- Aug 14, 2025
Malicious code in framework-express-nebula-ionosphere (npm)
- Aug 14, 2025
Malicious code in framework-backend-alphard-slidev (npm)
- Aug 14, 2025
Malicious code in framework-adonis-pyxis-neptune (npm)
- Aug 14, 2025
Malicious code in fraduino (npm)
- Aug 14, 2025
Malicious code in fqujyedpnshirvlk (npm)
- Aug 14, 2025
Malicious code in fqotgsvpylhxjekz (npm)
- Aug 14, 2025
Malicious code in fql_flow (npm)
- Aug 14, 2025
Malicious code in fqinstall (npm)
- Aug 14, 2025
Malicious code in fqgtrsadvzwkxuyb (npm)
- Aug 14, 2025
Malicious code in fpulse (npm)
- Aug 14, 2025
Malicious code in fpsview (npm)
- Aug 14, 2025
Malicious code in fpa-pso (npm)
- Aug 14, 2025
Malicious code in fpa-base (npm)
- Aug 14, 2025
Malicious code in fp_editor_v2 (npm)
- Aug 14, 2025
Malicious code in fp.editor.v2 (npm)
- Aug 14, 2025
Malicious code in foxwps (npm)
Page 6033 of 7,324