Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in keyla-poke64 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke56 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke55 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke47 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke61 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke66 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke75 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke67 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke49 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke53 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke52 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke50 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke60 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke70 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke77 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke71 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke74 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke76 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke72 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke54 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke6 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke39 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke43 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke35 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke25 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke44 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke41 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke37 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke27 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke24 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke36 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke34 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke15 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke22 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyla-poke33 (npm)
1 compromised version
Page 265 of 7,324