Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in airscope (npm)
- Aug 14, 2025
Malicious code in airplane-xylophone-vyq0 (npm)
- Aug 14, 2025
Malicious code in airplane-xerophyte-v1m9 (npm)
- Aug 14, 2025
Malicious code in airplane-vinegar-vp9d (npm)
- Aug 14, 2025
Malicious code in airplane-vinegar-mpxb (npm)
- Aug 14, 2025
Malicious code in airplane-titan-lgjl (npm)
- Aug 14, 2025
Malicious code in airplane-shack-bmni (npm)
- Aug 14, 2025
Malicious code in airplane-redshift-ft5i (npm)
- Aug 14, 2025
Malicious code in airplane-ocean-a3dr (npm)
- Aug 14, 2025
Malicious code in airplane-meteor-ei07 (npm)
- Aug 14, 2025
Malicious code in airbnb-vortex-release-it-yonder (npm)
- Aug 14, 2025
Malicious code in airbnb-typescript-prettier (npm)
- Aug 14, 2025
Malicious code in airbnb-typescript (npm)
- Aug 14, 2025
Malicious code in airbnb-tracking (npm)
- Aug 14, 2025
Malicious code in airbnb-relaxed (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-quasarjet-biogeochemistry-primatology (npm)
- Aug 14, 2025
Malicious code in airbnb-navigation (npm)
- Aug 14, 2025
Malicious code in airbnb-lite (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-hooks (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-hermes-redis-umbriel (npm)
- Aug 14, 2025
Malicious code in airbnb-fornax-draco-electron-builder (npm)
- Aug 14, 2025
Malicious code in airbnb-flow (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-es5 (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-cryovolcano-steganography-hexo (npm)
- Aug 14, 2025
Malicious code in airbnb-bundle (npm)
1 compromised version
- Aug 14, 2025
Malicious code in airbnb-base (npm)
4 compromised versions
- Aug 14, 2025
Malicious code in airbnb-angular (npm)
1 compromised version
- Aug 14, 2025
Malicious code in air-deploy-air-stub-bash (npm)
- Aug 14, 2025
Malicious code in air-cron-moon-compress-hash (npm)
- Aug 14, 2025
Malicious code in air-container-await-mock-final (npm)
- Aug 14, 2025
Malicious code in aion-web3-eth-iban (npm)
- Aug 14, 2025
Malicious code in ainyahya (npm)
- Aug 14, 2025
Malicious code in aimphone (npm)
- Aug 14, 2025
Malicious code in aimaze (npm)
- Aug 14, 2025
Malicious code in aileron-logger (npm)
- Aug 14, 2025
Malicious code in aigamnds (npm)
- Aug 14, 2025
Malicious code in aid-mercury (npm)
- Aug 14, 2025
Malicious code in aicsd-web-ui (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in ahmed88521n786-todo-list (npm)
- Aug 14, 2025
Malicious code in agyl-mail (npm)
- Aug 14, 2025
Malicious code in agus-ubi28-breki (npm)
- Aug 14, 2025
Malicious code in agus-tempe97-kuki (npm)
- Aug 14, 2025
Malicious code in agus-rujak77-breki (npm)
- Aug 14, 2025
Malicious code in agus-getuk15-kuki (npm)
- Aug 14, 2025
Malicious code in agus-donat95-sukiwir (npm)
- Aug 14, 2025
Malicious code in agus-brongkos84-breki (npm)
- Aug 14, 2025
Malicious code in agplayer (npm)
- Aug 14, 2025
Malicious code in agostle (npm)
- Aug 14, 2025
Malicious code in agoltools (npm)
- Aug 14, 2025
Malicious code in aglaia (npm)
Page 6137 of 7,293