Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-ragi93-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel5-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi15-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-pecel40-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-rangi44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi47-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oncom1-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur14-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel40-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi27-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-moci28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-oblok33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasicampur81-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-miemee97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-moci100-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasiuduk86-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasiuduk85-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-moci92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi7-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi5-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasi78-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-moci81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasiuduk70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasipecel13-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasisayur44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-nasiuduk16-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-miebogor37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-menjes24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mendut30-breki (npm)
1 compromised version
Page 390 of 7,327