Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-keripik14-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kentang53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kepok53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-jamblang18-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kemplang42-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-kacang26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gudeg54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk31-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk29-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gaplek91-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gado-gado68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getas93-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gulai58-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gaplek74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk2-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gorengan30-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gulai16-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gorengan60-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gudeg89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gulai73-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gandul78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getas76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk16-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getas99-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getas85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gudeg20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gembus56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gembus99-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gulai34-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gembus11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gorengan76-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gaplek9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gudeg23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gaplek50-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gulai28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ikan14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gudeg83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk54-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk67-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gembus31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gaplek69-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-gepuk87-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-getuk47-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-ikan1-ruro (npm)
1 compromised version
Page 422 of 7,327