Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-ronde21-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rawon84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rendang81-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rujak43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pisang69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-peyek4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ragi95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi43-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-papeda82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak52-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel4-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel8-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok16-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-papeda95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom3-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi20-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pisang34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangginang51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangginang46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ongol-ongol43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-papeda7-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangginang20-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-peyek52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangginang63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ongol-ongol3-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ragi21-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel17-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-otak-otak64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangginang15-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-papeda69-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pisang19-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ragi51-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pisang37-puyeng (npm)
1 compromised version
Page 389 of 7,327