Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,367 total · sorted newest first- Sep 13, 2026
Malicious code in indah-sroto51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tek89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sroto55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto46-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu6-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahutek10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tapai35-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto92-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-taiwan12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serimuka98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahutek7-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahutek47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serimuka76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu39-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-taiwan3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-taiwan55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-telur12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sroto96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu75-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sroto56-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-takokak11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tahu39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tapai20-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-takokak67-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto89-kuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-soto68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-teh13-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-teh12-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-teh11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-tapai28-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag85-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serabi5-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag2-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate30-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate23-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate17-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serabi70-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate86-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sego64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate23-breki (npm)
1 compromised version
Page 471 of 7,328