Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in fig-wge-project (npm)
- Aug 14, 2025
Malicious code in fig-wasabi-r9if (npm)
- Aug 14, 2025
Malicious code in fig-void-rxui (npm)
- Aug 14, 2025
Malicious code in fig-victor-november-kweva (npm)
- Aug 14, 2025
Malicious code in fig-victor-fx5p (npm)
- Aug 14, 2025
Malicious code in fig-victor-cvjd (npm)
- Aug 14, 2025
Malicious code in fig-vanilla-kcwd (npm)
- Aug 14, 2025
Malicious code in fig-tqy-project (npm)
- Aug 14, 2025
Malicious code in fig-tango-ohla (npm)
- Aug 14, 2025
Malicious code in fig-tangerine-foxtrot-liano (npm)
- Aug 14, 2025
Malicious code in fig-t7l-project (npm)
- Aug 14, 2025
Malicious code in fig-t1g-project (npm)
- Aug 14, 2025
Malicious code in fig-sui-project (npm)
- Aug 14, 2025
Malicious code in fig-spinach-cge0 (npm)
- Aug 14, 2025
Malicious code in fig-sierra-bla6 (npm)
- Aug 14, 2025
Malicious code in fig-rainbow-9z3s (npm)
- Aug 14, 2025
Malicious code in fig-papa-mike-zytmo (npm)
- Aug 14, 2025
Malicious code in fig-papa-date-hvvks (npm)
- Aug 14, 2025
Malicious code in fig-oscar-ilok (npm)
- Aug 14, 2025
Malicious code in fig-orange-vxjw (npm)
- Aug 14, 2025
Malicious code in fig-orange-mango-krqzj (npm)
- Aug 14, 2025
Malicious code in fig-o37-project (npm)
- Aug 14, 2025
Malicious code in fig-mountain-ds9b (npm)
- Aug 14, 2025
Malicious code in fig-mjx-project (npm)
- Aug 14, 2025
Malicious code in fig-mango-lima-uevfl (npm)
- Aug 14, 2025
Malicious code in fig-mango-hubp (npm)
- Aug 14, 2025
Malicious code in fig-mango-4qhu (npm)
- Aug 14, 2025
Malicious code in fig-lima-vanilla-zksua (npm)
- Aug 14, 2025
Malicious code in fig-lima-jtrl (npm)
- Aug 14, 2025
Malicious code in fig-lemon-india-frbia (npm)
- Aug 14, 2025
Malicious code in fig-l1x-project (npm)
- Aug 14, 2025
Malicious code in fig-kiwi-dunl (npm)
- Aug 14, 2025
Malicious code in fig-kilo-imdl (npm)
- Aug 14, 2025
Malicious code in fig-kilo-dloy (npm)
- Aug 14, 2025
Malicious code in fig-juliet-kilo-aasfj (npm)
- Aug 14, 2025
Malicious code in fig-j5o-project (npm)
- Aug 14, 2025
Malicious code in fig-j0p-project (npm)
- Aug 14, 2025
Malicious code in fig-india-ubne (npm)
- Aug 14, 2025
Malicious code in fig-india-owcb (npm)
- Aug 14, 2025
Malicious code in fig-india-mabn (npm)
- Aug 14, 2025
Malicious code in fig-hotel-zssj (npm)
- Aug 14, 2025
Malicious code in fig-hotel-vanilla-tncqg (npm)
- Aug 14, 2025
Malicious code in fig-hotel-lima-pqjez (npm)
- Aug 14, 2025
Malicious code in fig-hotel-iqba (npm)
- Aug 14, 2025
Malicious code in fig-hotel-fpgm (npm)
- Aug 14, 2025
Malicious code in fig-hotel-delta-gtoia (npm)
- Aug 14, 2025
Malicious code in fig-honeydew-oscar-hocrx (npm)
- Aug 14, 2025
Malicious code in fig-h6r-project (npm)
- Aug 14, 2025
Malicious code in fig-golf-papaya-vckwr (npm)
- Aug 14, 2025
Malicious code in fig-golf-hhvz (npm)
Page 6042 of 7,324