Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-kembang35-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kemplang8-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan50-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kembang13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketoprak33-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-kacang30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-keraktelor13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketoprak26-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ketan48-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gaplek62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jamblang9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jamblang90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ikan87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gudeg47-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jamblang10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gorengan39-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gudeg65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus1-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-esdoger76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ikan4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gaplek87-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ikan5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai56-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gaplek8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting6-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gaplek57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk3-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ikan79-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jamblang77-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-getas46-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gado-gado9-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-esdoger8-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jengkol62-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk2-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gudeg76-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai55-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gaplek36-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk96-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gorengan59-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-jus15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gandul37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gembus4-pore (npm)
1 compromised version
Page 480 of 7,328