Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-lupis6-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lumpur12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis35-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-martabak18-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lupis11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis25-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangga49-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis48-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-mangut37-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lutis11-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kupang13-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-liwet22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kupat3-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue94-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis52-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-liwet14-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis62-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lengko65-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-liwet45-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kupat92-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lodeh62-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue61-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue72-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lodeh8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue86-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue98-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis29-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue73-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lengko82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis32-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis25-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lepet70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis61-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lodeh23-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis2-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lodeh51-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lontong31-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue80-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kupang38-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-lapis22-sluey (npm)
1 compromised version
Page 477 of 7,328