Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangginang53-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-pisang74-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ragi65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangginang39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi6-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ragi52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rendang90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-rangi48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasisayur38-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-oncom22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasiuduk28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-pisang18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasipecel7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-peyek93-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasiuduk51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-papeda16-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasi73-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-pisang71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasi30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-papeda65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-pisang65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-papeda13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasicampur85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasi94-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-peyek82-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-papeda37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-otak-otak10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ongol-ongol37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasiuduk44-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasisayur14-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-pecel28-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-otak-otak71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-otak-otak7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-oncom91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-peyek19-sukiwir (npm)
1 compromised version
Page 474 of 7,328