Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Sep 13, 2026
Malicious code in izar-ora-exec-genomics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ubi28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ubi98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-magellan-readable-nodejs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tomat18-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-meteor-nightwatch-callisto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-wajit75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwsprxkcnhgbyatk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tomat69-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tumis27-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul91-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-neptune-spectron-webdriver-install (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-kronos-install-epimetheus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwenrvfsdjhckkuo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ixordocs-portal-gui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-corvus-babel-cors (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ixqzse-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tongseng47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-wajit54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in izar-capella-deimos-enceladus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tumis8-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-toge77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul23-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tongseng54-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telurtahu71-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tek13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tempe93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul15-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tek66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telur6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tempe58-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tempe64-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telurtahu19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telurtahu57-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tiwul11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tempe40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telur58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telur11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tek78-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tek34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telur91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tempe79-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-telur34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-takokak73-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-teh57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-teh15-miaww (npm)
1 compromised version
Page 385 of 7,326