Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-kacang76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keraktelor67-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang32-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kemplang28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kemplang68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jus80-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keraktelor56-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang42-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kemplang71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kepok74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jengkol31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keraktelor87-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jengkol94-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kentang26-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik50-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kentang45-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan95-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-keripik41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jengkol36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kemplang86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-jamblang3-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-kacang57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gepuk71-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gembus42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul94-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek83-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getuk42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek63-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gorengan81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai63-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getuk1-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gorengan15-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gepuk17-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai88-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gulai47-breki (npm)
1 compromised version
Page 395 of 7,327