Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in lina-teh44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tek5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-teh50-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu95-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-takokak57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-taiwan66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahutek14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahutek82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-taiwan46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahutek40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-takokak83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahutek55-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-takokak81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahutek63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-taiwan39-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-takokak41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sroto83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sroto4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sroto46-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu35-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu34-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu54-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu55-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-tahu70-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serabi74-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serimuka80-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serimuka69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serabi22-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serabi49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serabi53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-soto52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serabi11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-serimuka51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur95-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur83-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur77-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur56-breki (npm)
1 compromised version
Page 108 of 7,312