Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-sambel1-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel24-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ruwet46-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-saguer21-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ronde76-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-saguer28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak79-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak88-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambel50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujaksoto44-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak73-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-sambalado97-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rujak75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ronde10-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rojak37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rendang92-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rendang59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rawon87-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rojak39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rendang65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ragi45-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rawon69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rawon33-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rawon29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rawon94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ragi49-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi2-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ragi26-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangginang67-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi8-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi14-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangginang18-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke6 (npm)
1 compromised version
Page 473 of 7,328