Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
298,306 total in npm · sorted newest first- Sep 10, 2026
Malicious code in fajar-tahutek16-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-takokak48-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-takokak98-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tapai5-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek74-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek51-pore (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-takokak97-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek46-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh31-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan27-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan91-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan58-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh21-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-takokak19-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan34-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-takokak22-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan22-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek93-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tapai11-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan84-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-teh50-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-taiwan9-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek66-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto99-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto69-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur44-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi44-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur60-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto14-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur64-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur47-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto96-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto37-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu43-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto27-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek35-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu26-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur43-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto79-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur42-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek28-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto88-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto42-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serimuka69-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur54-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto27-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto78-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto52-tititugel (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi96-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi98-riris (npm)
1 compromised version
Page 6 of 5,967