Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,301 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-kue24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketan86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketan24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kolak68-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik67-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kolak14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak80-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue53-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak30-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue14-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting58-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue2-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketan58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kolak90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketan79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak43-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue38-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klipo81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kolak99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kripik30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klentik70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketoprak22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klanting74-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-klipo61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ketan82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kue40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang99-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jus27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jengkol10-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jus36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kembang36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keraktelor97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kemplang63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kentang74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik34-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keraktelor67-miaww (npm)
1 compromised version
Page 394 of 7,327