Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,331 total · sorted newest first- Sep 13, 2026
Malicious code in inufgi-gotauma-anafuz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotauma-ana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotma-anfgataz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotamaia-jamanana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotmua-anbzai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotamava-aaana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotmua-anabazai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotauma-anafugatz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotamaiva-aaana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotma-anufozai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamufifa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotama-aana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-jani (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gotama-ana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-janga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufifa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goblai-januga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-golai-januga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamuia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufg (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagilai-janigaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janiga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufgaiaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobgilai-januga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamina (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamiana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagli-janiaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobgilai-januqaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-januabalai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobagilai-janqigaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janualai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janui (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janig (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobgilai-januqigaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goai-januga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobali-janiguffga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufgaia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobgilai-januqga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gobgilai-januqgaga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamugaiana (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-goa-jamufgai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inufgi-gota-jamanna (npm)
1 compromised version
Page 437 of 7,327