Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-lengko55-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupang76-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue96-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupat64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupang2-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis97-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupat58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kupang2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue80-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue89-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lengko30-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lapis99-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-lengko12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue99-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kripik48-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klipo56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue31-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue15-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue46-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kripik15-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik39-breki (npm)
1 compromised version
Page 393 of 7,327