Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in fb-anya (npm)
- Aug 14, 2025
Malicious code in fazilet-scrapper (npm)
- Aug 14, 2025
Malicious code in fazilet-cli (npm)
- Aug 14, 2025
Malicious code in fazana (npm)
- Aug 14, 2025
Malicious code in favour (npm)
- Aug 14, 2025
Malicious code in fauzi-tempe17-breki (npm)
- Aug 14, 2025
Malicious code in fauzi-sasag90-sukiwir (npm)
- Aug 14, 2025
Malicious code in fauzi-pecel42-breki (npm)
- Aug 14, 2025
Malicious code in fauzi-martabak74-sukiwir (npm)
- Aug 14, 2025
Malicious code in fauzi-lapis65-kuki (npm)
- Aug 14, 2025
Malicious code in fauzi-getuk35-sukiwir (npm)
- Aug 14, 2025
Malicious code in faustwp-core (npm)
- Aug 14, 2025
Malicious code in faustwp-cli (npm)
- Aug 14, 2025
Malicious code in faustwp (npm)
- Aug 14, 2025
Malicious code in fatkit (npm)
- Aug 14, 2025
Malicious code in fastyle (npm)
- Aug 14, 2025
Malicious code in fastpaxos (npm)
- Aug 14, 2025
Malicious code in fastip (npm)
- Aug 14, 2025
Malicious code in fastgcn (npm)
- Aug 14, 2025
Malicious code in fastcgiqt (npm)
- Aug 14, 2025
Malicious code in fast-requests (npm)
- Aug 14, 2025
Malicious code in fast-proxy-pi-query-zeta (npm)
- Aug 14, 2025
Malicious code in fast-pack-app-components (npm)
- Aug 14, 2025
Malicious code in fast-mu-moon-moon-permission (npm)
- Aug 14, 2025
Malicious code in fast-long-secure-function-bundle (npm)
- Aug 14, 2025
Malicious code in fast-enum-compress-index-minify (npm)
- Aug 14, 2025
Malicious code in fast-cloud-mu-debug-sandbox (npm)
- Aug 14, 2025
Malicious code in fast-bash-tree-reject-omicron (npm)
- Aug 14, 2025
Malicious code in fashiongo-web-admin-v2-web (npm)
- Aug 14, 2025
Malicious code in fasetter (npm)
- Aug 14, 2025
Malicious code in farwolf (npm)
- Aug 14, 2025
Malicious code in farout-stream-loglevel-sequelize (npm)
- Aug 14, 2025
Malicious code in farout-redis-neptune-gatsby (npm)
- Aug 14, 2025
Malicious code in farout-publish-fornax-on (npm)
- Aug 14, 2025
Malicious code in farout-petrology-darkmatter-gatsby (npm)
- Aug 14, 2025
Malicious code in farout-hadron-terraforming-impulse (npm)
- Aug 14, 2025
Malicious code in farout-fetch-eslint-config-wolf (npm)
- Aug 14, 2025
Malicious code in farout-apollo-comet-wavefunction (npm)
- Aug 14, 2025
Malicious code in farmtick (npm)
- Aug 14, 2025
Malicious code in farmshare (npm)
- Aug 14, 2025
Malicious code in faraday-statsd (npm)
- Aug 14, 2025
Malicious code in faraasa (npm)
- Aug 14, 2025
Malicious code in fankctoxvrkdsmgq (npm)
- Aug 14, 2025
Malicious code in fanfav (npm)
- Aug 14, 2025
Malicious code in fancy-radiate-ygx449-project (npm)
- Aug 14, 2025
Malicious code in fancy-pure-vfk847-project (npm)
- Aug 14, 2025
Malicious code in fanada (npm)
- Aug 14, 2025
Malicious code in family-island-unlimited-energy463 (npm)
- Aug 14, 2025
Malicious code in family-island-unlimited-energy447 (npm)
- Aug 14, 2025
Malicious code in family-island-unlimited-energy362 (npm)
Page 6047 of 7,324