Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-getuk69-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gudeg15-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gepuk5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gembus2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gembus87-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan72-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-ikan2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-getas92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gorengan67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam83-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum17-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek23-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gado-gado5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek15-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal91-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-esdoger34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum99-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gado-gado51-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-esdoger77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-dodol49-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-donat19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gado-gado63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-dodol34-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum83-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-dodol37-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-esdoger53-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-dradag76-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-dodol65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gandul90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum9-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal47-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-esdoger86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting53-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gado-gado64-breki (npm)
1 compromised version
Page 396 of 7,327