Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,582 total · sorted newest first- Sep 17, 2026
Malicious code in laila-gudeg42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gudeg37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gudeg70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gorengan36-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-getas76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek44-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gandul20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-getas35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek12-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gado-gado6-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gandul34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gado-gado43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gembus45-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gandul13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gado-gado38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-getas30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-enting18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gandul57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gado-gado58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-enting86-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gaplek96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gandul9-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk60-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-enting31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gembus90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger27-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-gepuk96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-esdoger69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-enting89-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-donat14-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubursumsum44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal9-ruro (npm)
1 compromised version
Page 166 of 7,312