Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-lodeh20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupat50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kupang24-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lengko66-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-liwet25-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-liwet84-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lepet8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-lapis49-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue90-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klentik25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kolak17-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue53-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klanting54-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klentik35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue54-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klanting45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klipo57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue21-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketan40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue15-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue69-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue3-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketoprak86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klanting15-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klipo11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketan36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kripik46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klentik7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue70-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik92-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kripik29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kolak6-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketan42-sukiwir (npm)
1 compromised version
Page 420 of 7,327