Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,581 total · sorted newest first- Sep 17, 2026
Malicious code in laila-kupat72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kolak79-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kue5-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kue16-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kupat27-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kripik48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kue53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keraktelor26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang1-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak1-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik67-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang27-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kepok90-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting94-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klentik36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kepok10-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kentang99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kepok91-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting69-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keripik74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kepok90-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keraktelor28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kepok41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keraktelor30-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-klanting40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan63-miaww (npm)
1 compromised version
Page 164 of 7,312