Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,367 total · sorted newest first- Sep 13, 2026
Malicious code in indea-fodij-agafba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodij-agafajaba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agov (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodij-agafaba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajonaifau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agaji (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodij-agafajba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agafa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit45-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agafaafiba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng36-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-aganfa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit82-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajonifau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agafba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajona (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agajonafau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tumis12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agaj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-aganfau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng66-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi3-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agafajafiba (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi89-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-ago (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodioj-agajonaifau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tumis91-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-wajit78-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodij-agf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-agajonfau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi44-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi68-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tomat93-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tongseng90-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ubi98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodio-ag (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indea-fodij-agafajafiba (npm)
1 compromised version
Page 469 of 7,328