Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in indah-enting14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-buburayam5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-empal76-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-enting74-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-gado-gado57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-esdoger16-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso42-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika85-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan54-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika80-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso45-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur65-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika79-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso82-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos52-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika56-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur72-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-brongkos66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bubur5-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-botok69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakwan61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bika67-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-botok48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gigaiuasgfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gfo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-guogogiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagabugailan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigafo (npm)
1 compromised version
Page 482 of 7,328