Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,576 total · sorted newest first- Sep 17, 2026
Malicious code in lina-getas54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-gaplek72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-esdoger77-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-esdoger72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-donat53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brengkes72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur2-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubursumsum54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brengkes77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-donat31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brongkos64-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brongkos40-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-dradag84-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-donat42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubursumsum8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-donat19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur84-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam97-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-dodol24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam58-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubursumsum30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal73-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brongkos42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubursumsum93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-dradag81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-dradag16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubursumsum72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal31-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-buburayam82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-brongkos83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-bubur36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-donat18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lina-empal51-sukiwir (npm)
1 compromised version
Page 120 of 7,312