Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-lodeh20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mendoan56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-liwet70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lepet90-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lodeh48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut31-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mendoan6-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lontong27-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lutis10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-liwet32-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lepet31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lupis18-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lengko85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-martabak17-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangga87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lodeh96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-liwet37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-martabak13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangga46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-martabak72-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mendoan19-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lontong24-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lodeh83-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut38-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-martabak86-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lengko56-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lontong85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lutis72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mendoan32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lumpur93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lepet25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lontong56-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lodeh32-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-martabak74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lupis1-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lodeh72-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lupis91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut87-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-mangut23-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue71-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue92-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupang10-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupat33-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue86-sluey (npm)
1 compromised version
Page 392 of 7,327