Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in fig-foxtrot-cvma (npm)
- Aug 14, 2025
Malicious code in fig-ferry-0fki (npm)
- Aug 14, 2025
Malicious code in fig-eg8-project (npm)
- Aug 14, 2025
Malicious code in fig-echo-wyji (npm)
- Aug 14, 2025
Malicious code in fig-echo-mango-puoow (npm)
- Aug 14, 2025
Malicious code in fig-dragonfruit-ak3o (npm)
- Aug 14, 2025
Malicious code in fig-date-uniform-ijmcz (npm)
- Aug 14, 2025
Malicious code in fig-cherry-yejf (npm)
- Aug 14, 2025
Malicious code in fig-charlie-kilo-euejx (npm)
- Aug 14, 2025
Malicious code in fig-bfp-project (npm)
- Aug 14, 2025
Malicious code in fig-bark-difg (npm)
- Aug 14, 2025
Malicious code in fig-b77-project (npm)
- Aug 14, 2025
Malicious code in fig-ato-project (npm)
- Aug 14, 2025
Malicious code in fig-apple-victor-lqfxr (npm)
- Aug 14, 2025
Malicious code in fig-93k-project (npm)
- Aug 14, 2025
Malicious code in fig-49o-project (npm)
- Aug 14, 2025
Malicious code in fig-17u-project (npm)
- Aug 14, 2025
Malicious code in fig-13d-project (npm)
- Aug 14, 2025
Malicious code in fifa-23-points (npm)
- Aug 14, 2025
Malicious code in fiestah (npm)
- Aug 14, 2025
Malicious code in fieldtext (npm)
- Aug 14, 2025
Malicious code in ficlovers (npm)
- Aug 14, 2025
Malicious code in fhstdcelrxinoaju (npm)
- Aug 14, 2025
Malicious code in fgsqlbzkpxkivdce (npm)
- Aug 14, 2025
Malicious code in fgnfgj5 (npm)
- Aug 14, 2025
Malicious code in fgbpcylsztjauxeh (npm)
- Aug 14, 2025
Malicious code in fg-recorder (npm)
- Aug 14, 2025
Malicious code in ffxfx-paypal (npm)
- Aug 14, 2025
Malicious code in fftool (npm)
- Aug 14, 2025
Malicious code in fftiers (npm)
- Aug 14, 2025
Malicious code in ffosrepl (npm)
- Aug 14, 2025
Malicious code in ffmobile (npm)
- Aug 14, 2025
Malicious code in ffiruby (npm)
- Aug 14, 2025
Malicious code in ffhfjhfjhf (npm)
- Aug 14, 2025
Malicious code in ffg-ui (npm)
- Aug 14, 2025
Malicious code in ffg-env (npm)
- Aug 14, 2025
Malicious code in ff4as (npm)
- Aug 14, 2025
Malicious code in ff-db (npm)
- Aug 14, 2025
Malicious code in fetgat (npm)
- Aug 14, 2025
Malicious code in fetch-zenobia-metabolomics-quantum-computing (npm)
- Aug 14, 2025
Malicious code in fetch-typeorm-karma-technocracy (npm)
- Aug 14, 2025
Malicious code in fetch-tethys-remark-taurus (npm)
- Aug 14, 2025
Malicious code in fetch-selenology-yaml-koa (npm)
- Aug 14, 2025
Malicious code in fetch-cluster-carpo-await (npm)
- Aug 14, 2025
Malicious code in fesenko (npm)
- Aug 14, 2025
Malicious code in ferv3 (npm)
- Aug 14, 2025
Malicious code in ferry-xerophyte-2j08 (npm)
- Aug 14, 2025
Malicious code in ferry-whiskey-bdq3 (npm)
- Aug 14, 2025
Malicious code in ferry-underpass-4clm (npm)
- Aug 14, 2025
Malicious code in ferry-umbrella-770z (npm)
Page 6043 of 7,324