Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in laila-sambalado73-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sambalado13-devapp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-serabi25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sasag93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sasag58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-serimuka38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sego96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sate79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-semur26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-soto88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-soto71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sate1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sate14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-sasag20-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ruwet77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujaksoto36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujak50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak24-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rawon19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rendang82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rendang37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujaksoto94-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak30-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak45-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rawon85-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujaksoto43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rendang41-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujak37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rawon87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde45-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rendang76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ruwet99-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-saguer51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujak22-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujak32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rendang34-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ruwet35-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ronde53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak68-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujaksoto90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi74-breki (npm)
1 compromised version
Page 158 of 7,312