Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in fca-tnxtrick (npm)
- Aug 14, 2025
Malicious code in fca-tisting (npm)
- Aug 14, 2025
Malicious code in fca-sus (npm)
- Aug 14, 2025
Malicious code in fca-shadow (npm)
- Aug 14, 2025
Malicious code in fca-rqzax-remake (npm)
- Aug 14, 2025
Malicious code in fca-rqzax-dev (npm)
- Aug 14, 2025
Malicious code in fca-qlamzour (npm)
- Aug 14, 2025
Malicious code in fca-qlam (npm)
- Aug 14, 2025
Malicious code in fca-pro (npm)
- Aug 14, 2025
Malicious code in fca-pisting-yawa (npm)
- Aug 14, 2025
Malicious code in fca-manh19fc-remake (npm)
- Aug 14, 2025
Malicious code in fca-huykaiser-remake (npm)
- Aug 14, 2025
Malicious code in fca-huykaiser (npm)
- Aug 14, 2025
Malicious code in fca-hurezun (npm)
- Aug 14, 2025
Malicious code in fca-horizon-remake (npm)
- Aug 14, 2025
Malicious code in fca-duong (npm)
- Aug 14, 2025
Malicious code in fca-donqdz2006 (npm)
- Aug 14, 2025
Malicious code in fca-deku-test (npm)
- Aug 14, 2025
Malicious code in fca-deku-remake (npm)
- Aug 14, 2025
Malicious code in fca-deko (npm)
- Aug 14, 2025
Malicious code in fca-d-rm1 (npm)
- Aug 14, 2025
Malicious code in fca-d-rm (npm)
- Aug 14, 2025
Malicious code in fca-carla (npm)
- Aug 14, 2025
Malicious code in fca-bot-game (npm)
- Aug 14, 2025
Malicious code in fca-anya-remake (npm)
- Aug 14, 2025
Malicious code in fca-anjelo (npm)
- Aug 14, 2025
Malicious code in fca-aliya-remake (npm)
- Aug 14, 2025
Malicious code in fca-aliiya-remake (npm)
- Aug 14, 2025
Malicious code in fca-ali-atf (npm)
- Aug 14, 2025
Malicious code in fca-ali (npm)
- Aug 14, 2025
Malicious code in fca (npm)
- Aug 14, 2025
Malicious code in fbxloader (npm)
- Aug 14, 2025
Malicious code in fbw-platform-common (npm)
- Aug 14, 2025
Malicious code in fbrain (npm)
- Aug 14, 2025
Malicious code in fboffline (npm)
- Aug 14, 2025
Malicious code in fbjs-opensource (npm)
1 compromised version
- Aug 14, 2025
Malicious code in fbiframe (npm)
- Aug 14, 2025
Malicious code in fbfr4 (npm)
- Aug 14, 2025
Malicious code in fbdeoxicwnlkgkvt (npm)
- Aug 14, 2025
Malicious code in fbdemo (npm)
- Aug 14, 2025
Malicious code in fbconsole (npm)
- Aug 14, 2025
Malicious code in fbcode (npm)
- Aug 14, 2025
Malicious code in fbchan (npm)
- Aug 14, 2025
Malicious code in fb-tanjiro (npm)
- Aug 14, 2025
Malicious code in fb-logger (npm)
- Aug 14, 2025
Malicious code in fb-jake (npm)
- Aug 14, 2025
Malicious code in fb-deku-rm (npm)
- Aug 14, 2025
Malicious code in fb-deku-remake (npm)
- Aug 14, 2025
Malicious code in fb-chat-shadow (npm)
- Aug 14, 2025
Malicious code in fb-chat-deku (npm)
Page 6046 of 7,324