Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in lina-sego30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sego5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sasag48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sego57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sego96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur13-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sasag36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate75-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur11-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sego65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sate60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-semur43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujak34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ronde6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambel28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-saguer33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujaksoto92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ruwet32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ruwet47-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado26-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado60-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujak45-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujak55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ronde48-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rawon81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-saguer73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujak43-crottsekebon (npm)
1 compromised version
Page 109 of 7,312