Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,178 total · sorted newest first- Sep 17, 2026
Malicious code in kresna-lontong85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lumpur100-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lumpur83-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangut20-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lumpur10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga10-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lutis64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lumpur33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lutis36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga1-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga19-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lutis82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lumpur7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga6-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-mangga15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lengko14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong80-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-liwet11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis84-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis70-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lengko94-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet27-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lengko46-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-liwet35-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lodeh29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-liwet84-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lodeh32-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lengko36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lodeh20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis97-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet23-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-liwet88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lapis88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong64-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lepet46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kresna-lontong72-ruro (npm)
1 compromised version
Page 227 of 7,324