Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,573 total · sorted newest first- Sep 17, 2026
Malicious code in lina-rujak69-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-saguer51-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-sambalado67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ronde44-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rujak92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rawon89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak70-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rendang9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak49-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak13-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak30-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ronde2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rojak73-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rawon67-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rawon1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi9-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi98-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi99-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi66-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rawon13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangginang98-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangi57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangginang65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangginang48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-rangginang30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ragi30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke60 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke47 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke6 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke68 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke67 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke69 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke54 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke56 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke52 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-ragi69-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-poke55 (npm)
1 compromised version
Page 110 of 7,312