Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,367 total · sorted newest first- Sep 13, 2026
Malicious code in indah-sego73-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur34-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serabi81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate90-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur88-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sego36-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate33-kuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag63-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serabi41-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur31-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel85-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate99-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur86-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur80-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sasag68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serimuka57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-semur40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serimuka61-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-serabi64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sate85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rojak82-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rojak53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambalado42-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ronde11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujaksoto42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambalado71-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-saguer46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-saguer12-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ruwet50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel3-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ruwet57-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ruwet66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujaksoto38-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rojak69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ronde37-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel1-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel24-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ruwet46-riris (npm)
1 compromised version
Page 472 of 7,328