Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,303 total · sorted newest first- Sep 13, 2026
Malicious code in iwan-bakwan80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakso95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan70-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivyedge (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-asinan3-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-wasabi-5glb (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivycrm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakso36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika36-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bika25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iwan-bakwan23-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itminepack101 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-fnddb-h7jq1-twilight-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-0nx1s-8jfp0-unity-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivx-cloud-client-v1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-cyi1h-sycc9-knoll-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-kiwi-jyje (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iunxtio (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itprod (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuythdjfhgffyg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-raspberry-a549 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuythdjfhgffs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itwd-icons (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivenyang (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivisitors (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-vcrrz-7b7vr-glow-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuythdjfhgff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivmaker (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itfd (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-sierra-iu11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivy-lib (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivtvrecsh (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itsorits (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itself-country-orange (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivocab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iunnoman (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuaynf-devapptea (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ivm_client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itemsselector (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itemsound (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iuythdjfhgffdf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itvrepo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in itx-zara-web-common (npm)
1 compromised version
Page 398 of 7,327