Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,582 total · sorted newest first- Sep 17, 2026
Malicious code in laila-donat82-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal12-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubursumsum79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dradag38-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubursumsum61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal60-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubursumsum26-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur60-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dradag53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur78-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-empal59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur60-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubur39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bubursumsum78-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-buburayam15-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-donat8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-dodol92-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brongkos68-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bika19-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes60-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-botok38-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-brengkes76-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bika100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-bika71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in laila-botok16-miaww (npm)
1 compromised version
Page 167 of 7,312