Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-rangi29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ragi93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rendang68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ruwet72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujak41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rawon41-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ronde56-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak75-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rojak87-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pisang86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rujaksoto92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangi23-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ragi41-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-rangginang39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasiuduk77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pisang10-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-peyek24-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-papeda48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-otak-otak43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-otak-otak50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oblok65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasipecel83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-peyek71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-otak-otak37-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pecel77-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasiuduk66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pisang3-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-papeda45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasisayur28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ongol-ongol45-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oblok42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oblok25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-papeda30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pecel17-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-pecel10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-otak-otak42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasiuduk31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oblok59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oblok72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-papeda73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-oncom99-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-peyek79-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-peyek63-ruro (npm)
1 compromised version
Page 416 of 7,327