Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,582 total · sorted newest first- Sep 17, 2026
Malicious code in laila-ketan63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keraktelor42-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-keraktelor95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketan51-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ketoprak18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kembang57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kacang91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kembang95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jengkol95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai10-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kembang36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai64-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gudeg91-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jengkol30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kacang69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus28-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kembang23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jengkol49-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jengkol38-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jengkol43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gudeg84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kacang9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jamblang74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus11-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ikan22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ikan95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai68-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gudeg81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus3-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-kemplang47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-ikan80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus9-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gulai29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-jus58-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-getuk9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-getuk43-riris (npm)
1 compromised version
Page 165 of 7,312