Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Aug 14, 2025
Malicious code in failing-code (npm)
- Aug 14, 2025
Malicious code in fafalios (npm)
- Aug 14, 2025
Malicious code in fadhil-tahu79-breki (npm)
- Aug 14, 2025
Malicious code in fadhil-rojak36-sukiwir (npm)
- Aug 14, 2025
Malicious code in fadhil-nasipecel73-sukiwir (npm)
- Aug 14, 2025
Malicious code in fadhil-miebogor82-sukiwir (npm)
- Aug 14, 2025
Malicious code in fadhil-kue67-breki (npm)
- Aug 14, 2025
Malicious code in fadhil-keraktelor42-sukiwir (npm)
- Aug 14, 2025
Malicious code in fadhil-kacang37-breki (npm)
- Aug 14, 2025
Malicious code in fadhil-empal82-breki (npm)
- Aug 14, 2025
Malicious code in facturae (npm)
- Aug 14, 2025
Malicious code in faceworld (npm)
- Aug 14, 2025
Malicious code in facetjs-mysql-requester (npm)
- Aug 14, 2025
Malicious code in facetjs-legacy (npm)
- Aug 14, 2025
Malicious code in facetjs-druid-requester (npm)
- Aug 14, 2025
Malicious code in facetjs (npm)
- Aug 14, 2025
Malicious code in facet-cli (npm)
- Aug 14, 2025
Malicious code in facerecog (npm)
- Aug 14, 2025
Malicious code in facedect (npm)
- Aug 14, 2025
Malicious code in facebook-chat-api-deku (npm)
- Aug 14, 2025
Malicious code in face-engine (npm)
- Aug 14, 2025
Malicious code in fable_8a2ib_5kltb_solace (npm)
- Aug 14, 2025
Malicious code in fable-yekno-ajgx2-lake-project (npm)
- Aug 14, 2025
Malicious code in fable-unison-egl659-project (npm)
- Aug 14, 2025
Malicious code in fable-ronu2-be0jn-jasper-project (npm)
- Aug 14, 2025
Malicious code in fable-i5rf0-fh8uj-fern-project (npm)
- Aug 14, 2025
Malicious code in fable-d60nj-92p6f-lunar-project (npm)
- Aug 14, 2025
Malicious code in fable-bmpfz-eqd5r-thunder-project (npm)
- Aug 14, 2025
Malicious code in fable-501vd-qim9k-moonstone-project (npm)
- Aug 14, 2025
Malicious code in fable-2jhy3-dbplf-juniper-project (npm)
- Aug 14, 2025
Malicious code in fable-1gy3t-t9z99-xenon-project (npm)
- Aug 14, 2025
Malicious code in fabeve (npm)
- Aug 14, 2025
Malicious code in fabalous-runtime-web (npm)
- Aug 14, 2025
Malicious code in fabalous-login (npm)
- Aug 14, 2025
Malicious code in fabalous-core (npm)
- Aug 14, 2025
Malicious code in fa-sdk-web (npm)
- Aug 14, 2025
Malicious code in f9gixr (npm)
- Aug 14, 2025
Malicious code in f5fg (npm)
- Aug 14, 2025
Malicious code in f443 (npm)
- Aug 14, 2025
Malicious code in f39qm5 (npm)
- Aug 14, 2025
Malicious code in f34th3r-react-components (npm)
- Aug 14, 2025
Malicious code in f-deku (npm)
- Aug 14, 2025
Malicious code in ezvbby (npm)
- Aug 14, 2025
Malicious code in eztxter (npm)
- Aug 14, 2025
Malicious code in eztrade (npm)
- Aug 14, 2025
Malicious code in ezmoodle (npm)
- Aug 14, 2025
Malicious code in ezedit (npm)
- Aug 14, 2025
Malicious code in eywkwae (npm)
- Aug 14, 2025
Malicious code in eyisozlrnavjwhkc (npm)
- Aug 14, 2025
Malicious code in eyexam (npm)
Page 6049 of 7,324