Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,300 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-tapai66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan5-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tapai73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-takokak85-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan25-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tapai58-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tapai27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tapai48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tapai88-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan30-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-takokak84-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-teh21-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-takokak40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto44-kuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu48-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto31-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu84-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto1-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto43-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka69-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-taiwan18-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu15-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek10-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka13-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto91-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu26-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu92-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek74-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu71-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto27-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka83-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka36-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto1-miaww (npm)
1 compromised version
Page 386 of 7,326