Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in inul-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-janu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-jaran (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inul-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-januabali (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inul-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-januai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-januabalai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inul-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inul-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inul-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-januaai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jmfai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagiaf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagrn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagmruan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jigugamafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagiafugr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotumafa-anmfozai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagrun (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jimafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotumafa-anuz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagiafugair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jgr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotvama-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagr (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jimfai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-jagmruan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jiggmafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagiafug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagiafgair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotvma-anbi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jigugmafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotumafa-anz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-jaan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagigair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagiafugir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagar (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagruan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagiair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jigmafai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobali-jagruan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotumafa-anuaz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jgrn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gobai-jagiagair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jmai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagiafugair (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufi-gfobai-jagif (npm)
1 compromised version
Page 435 of 7,327