Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in laila-ruwet23-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rujak67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rojak13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pecel69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-papeda73-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi12-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-peyek84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol5-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-peyek19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pecel8-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi80-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang59-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-peyek92-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-peyek72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol81-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi64-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang2-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pisang50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangi52-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pecel58-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pisang66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-otak-otak42-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-papeda68-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-peyek52-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-rangginang95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-pisang100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi74-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ragi12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oblok28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasiuduk18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oncom32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oblok30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur94-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oncom69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasipecel69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasisayur70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasipecel17-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasiuduk28-sluey (npm)
1 compromised version
Page 159 of 7,312