Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in laila-ongol-ongol43-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasisayur11-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oblok64-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ongol-ongol26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasipecel50-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasisayur8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oblok15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur51-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasipecel9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-oncom3-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasiuduk53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasiuduk38-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasisayur26-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miemee17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miebogor78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget53-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasi62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieaceh38-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miemee65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci73-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget40-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miebogor27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasi93-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur28-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasi30-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miebogor57-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miemee79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-miebogor45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasi3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasi75-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mieayam4-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-moci15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-naget35-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-nasicampur13-sukiwir (npm)
1 compromised version
Page 160 of 7,312