Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-esdoger16-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gepuk31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gado-gado62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-ikan3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gembus90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gulai7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gembus3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gandul60-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gado-gado23-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gudeg4-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-donat32-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dodol99-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-donat15-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dodol62-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubursumsum58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam58-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubursumsum65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur87-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag72-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dodol63-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag66-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dodol40-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-donat12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting86-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam62-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting80-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal31-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubursumsum82-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubursumsum79-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubursumsum48-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal18-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag19-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-esdoger20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-donat64-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dradag51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal65-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-dodol8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-donat22-mmqe (npm)
1 compromised version
Page 481 of 7,328