Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
298,306 total in npm · sorted newest first- Sep 10, 2026
Malicious code in falcon-amber-zkm371-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng45-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat93-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in falcon-fern-zar747-project (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-wajit67-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng3-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tongseng49-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe83-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge6-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu69-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe44-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe21-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe59-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat64-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul39-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul35-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tiwul9-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat100-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge26-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe6-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe60-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge91-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge5-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-toge47-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe61-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tempe93-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tomat8-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur43-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek69-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu37-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek23-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur94-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu12-tititugel (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur69-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur74-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur57-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur64-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek60-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur88-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telur52-pore (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh59-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu51-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek47-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu84-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek99-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-telurtahu52-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh57-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tek13-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh20-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tapai3-remi (npm)
1 compromised version
Page 5 of 5,967