Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-sate95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sasag50-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambalado36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi87-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rojak97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambalado90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ronde8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang86-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ruwet55-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ronde82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon20-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon83-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ronde85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-saguer85-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rojak61-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rojak49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ruwet45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel26-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon99-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rojak9-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang58-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambalado95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ruwet7-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ronde34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rojak4-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-sambel17-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak99-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang65-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ruwet19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujaksoto33-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ruwet95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang46-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-saguer21-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-saguer77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ronde100-miaww (npm)
1 compromised version
Page 388 of 7,327