Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-tahu21-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto21-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu55-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur75-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-serabi48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-serimuka30-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-serabi74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego85-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahutek2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto13-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sroto47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-soto71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-tahu69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego96-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-semur54-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-saguer54-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate77-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag41-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate63-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate23-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-saguer74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambalado7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel22-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel81-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-saguer78-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag21-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate91-kyuki (npm)
1 compromised version
Page 414 of 7,327