Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-tek20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-taiwan20-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tapai4-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahutek98-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tapai27-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-teh66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahutek95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telurtahu63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tek11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-teh53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tapai72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-taiwan51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-teh79-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-taiwan54-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tek51-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tek91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telur21-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe26-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telurtahu8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahutek8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telur26-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-taiwan100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-teh37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-taiwan7-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-teh37-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telurtahu39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tapai6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe35-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-takokak22-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tempe16-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tek60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-telurtahu90-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-takokak49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tek50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-takokak73-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur11-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto90-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-serabi37-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sroto31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto100-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-serabi64-riris (npm)
1 compromised version
Page 413 of 7,327