Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-mendut59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mie92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-nasi29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mendoan49-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-naget1-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-miemee29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mie67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mendoan31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-moci63-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mie5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-miemee96-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mieaceh56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-moci3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-menjes11-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mendut94-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-naget45-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-moci100-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mieaceh22-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mieayam28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mieayam60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mendoan50-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mieayam62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mie95-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak3-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak41-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut35-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lupis31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak53-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangga73-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lupis95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut50-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lontong56-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak29-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lontong71-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur66-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangga4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut24-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lontong44-breki (npm)
1 compromised version
Page 476 of 7,328