Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-klentik1-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kolak27-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kue65-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-klentik11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-klanting97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-klipo39-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus37-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kentang43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kepok86-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang4-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik33-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kentang27-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik68-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keraktelor28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keraktelor84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kepok56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketoprak21-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketoprak20-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kentang79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik32-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kepok75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kembang98-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik19-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kemplang43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik70-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kepok54-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik38-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kembang48-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kentang7-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan38-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kembang24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keripik3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kembang62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan14-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus94-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kentang79-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketoprak20-sluey (npm)
1 compromised version
Page 479 of 7,328