Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-miemee32-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasi38-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mendoan39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mie1-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-menjes63-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-miebogor34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-miebogor1-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mieaceh24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasicampur1-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-moci36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mendoan59-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-nasicampur69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-moci5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-miemee28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mieayam95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-miebogor83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangga39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lupis73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lontong81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut73-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur22-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak79-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangga79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh67-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis30-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lupis91-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis51-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut7-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur86-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut26-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lupis96-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut23-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak66-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lupis48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lumpur10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangga81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis90-miaww (npm)
1 compromised version
Page 418 of 7,327