Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in irfan-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irassdhi-ssdss1s-rwew (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfankhalid (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irassdhi-sdsds-rwew (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irassdhi-sds1s-sswe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-wsdew-sza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irfan-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irassdhi-ssds1s-rwew (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-se-1231 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-sea-swe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irai-igafo-jag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-sea-sswe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2aaa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-asras-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-21-re2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-21-re2ff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-21-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2aaswsaa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2a-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-aras-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-s-sza (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2awaa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2awsaa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-21a-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2aa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-2aaswfsaa-a (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-se-swe (npm)
1 compromised version
- Sep 13, 2026
Malicious code in irashi-21-are2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ira-7 (npm)
1 compromised version
Page 426 of 7,327