Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-donat82-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-gaplek10-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting81-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubursumsum96-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-enting31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-buburayam15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-empal75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur98-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok62-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-brongkos24-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-brengkes8-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-brongkos99-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur7-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-botok73-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-brongkos72-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur84-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bubur58-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-z3xgp-yt7sr-ember-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivyplug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-volcano-085d (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-asinan68-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy_ogoro_8cq5s_glacier (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan98-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy_mrbx5_tv2ls_yarn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-asinan76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-vt5ig-u6rtm-terra-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-asinan71-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan81-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika51-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy_msxbq_uy1fu_willow (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan81-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-asinan81-riris (npm)
1 compromised version
Page 397 of 7,327