Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-mangut77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lontong91-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangga91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lontong7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lupis55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak7-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangga8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak77-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-mangut98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-martabak68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-liwet94-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lutis36-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lengko55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue95-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lepet94-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis97-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupat72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis12-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lepet66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue75-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang75-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lepet80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis92-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue98-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupat67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis30-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue97-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lodeh33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang80-sluey (npm)
1 compromised version
Page 419 of 7,327