Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-sasag94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag55-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate7-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sego59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambalado25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sasag89-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sambel47-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-saguer11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-sate46-puyeng (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang89-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde88-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi76-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang70-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi21-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak73-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujaksoto61-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang68-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet61-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rawon65-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang56-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujaksoto80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang18-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ragi62-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi89-riris (npm)
1 compromised version
Page 415 of 7,327