Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,284 total · sorted newest first- Sep 14, 2026
Malicious code in @biz44/process-runtime-utils (npm)
3 compromised versions
- Sep 14, 2026
Malicious code in @biz44/runtime-utils (npm)
5 compromised versions
- Sep 14, 2026
Malicious code in faiss-cpu-avx512 (PyPI)
8 compromised versions
- Sep 14, 2026
Malicious code in webpackbootstrapscripts (npm)
1 compromised version
- Sep 14, 2026
Malicious code in webpackbootstrap5 (npm)
1 compromised version
- Sep 14, 2026
Malicious code in @zaka13/thing (npm)
1 compromised version
- Sep 14, 2026
Malicious code in pino-ulid (npm)
3 compromised versions
- Sep 13, 2026
Malicious code in joko-ketoprak70-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting72-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak89-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik33-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-klanting26-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak97-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan29-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor71-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak93-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan77-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan89-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan92-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor76-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketan94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik43-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik82-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-kepok90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keraktelor90-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-ketoprak52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik100-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in joko-keripik32-remi (npm)
1 compromised version
Page 345 of 7,326