Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-soto1-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek64-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek53-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto20-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serimuka52-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahutek52-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sroto15-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-tahu80-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-soto82-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serabi88-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sasag65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sego32-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel93-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur87-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur42-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate78-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sego65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel60-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serabi67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate44-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur33-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate12-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serabi43-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate92-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur74-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-serabi1-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur85-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sasag29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sego22-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sasag46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sate56-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-semur12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel27-miaww (npm)
1 compromised version
Page 387 of 7,327