Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-kripik53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kripik71-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketoprak11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue44-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klentik35-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klanting19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue24-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klentik17-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue60-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue41-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kripik95-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kue62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kolak16-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-klanting40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ketoprak7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kripik12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keripik61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kembang50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keraktelor39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kembang25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keraktelor42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-keraktelor16-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ikan21-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kemplang54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jus81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kepok52-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kentang54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kentang13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kepok4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kemplang66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ikan29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kepok78-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kentang5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jus96-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jengkol48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jengkol71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jengkol10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jus47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kepok16-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kembang94-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kembang20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jamblang13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kentang57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jamblang54-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang7-apidev (npm)
1 compromised version
Page 421 of 7,327