Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in laila-menjes65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mangga14-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mangut43-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-menjes18-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mendut34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mangut44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lutis29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-martabak65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mendoan46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-martabak1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-mangut90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-liwet94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lumpur29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lodeh67-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-liwet86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lontong15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lengko26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lepet44-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lumpur46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kupat83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lontong63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lumpur77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lontong50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lepet11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis99-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lodeh17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-liwet88-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lumpur63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lengko62-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lontong20-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-liwet95-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis36-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-liwet35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lepet4-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis89-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lengko48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lontong99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lumpur27-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lapis16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-lengko23-riris (npm)
1 compromised version
Page 162 of 7,312