Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irma-gado-gado22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brongkos63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok60-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brongkos31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brongkos39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brongkos20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok40-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok42-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brengkes93-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bika70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bika25-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok38-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-brengkes51-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bika60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bika37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-botok65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-asinan85-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irishfool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris_dbnpv_2cgaw_solace (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-asinan80-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-asinan83-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris_rfoep_vb4b8_crystal (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan33-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris_1rgzu_iul0o_wander (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris_2e89x_rkrpt_fern (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-asinan55-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris_o1bot_lp45d_unicorn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan56-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-asinan52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan10-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irma-bakwan52-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-cloud-ntm849-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-ys7oy-ayux1-obsidian-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-e8878-zrte5-labyrinth-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-46nms-0q2tk-song-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-fjord-wdj348-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-7sth0-wdjq6-moonlight-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-ue74j-6ofnn-oracle-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-7cmmq-sgta5-yarn-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-klf5s-q9m49-quill-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-dandelion-zmt963-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iris-cd611-f1bbs-zen-project (npm)
1 compromised version
Page 424 of 7,327