Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in inda-foji-gigaiuasgsfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagaban (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gias (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gugoiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagabuilan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisaguan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaiasgafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gug (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaiaafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-asinan47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-bakso28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagaulan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagun (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gugopa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaiuasgsafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-guga (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-giauasfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaiuasgafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagabugailan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagabgilan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagablan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagabuailan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-giaasfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-giaiuasfia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigafoi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-guofagogiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-go (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-giasa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in indah-asinan11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gugoa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gifo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigafofi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-guofgogiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagabglan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-giasia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gigaiuasgsaofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gisagaan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodji-gigaiafofia (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-fodja-gugogiapa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foi-gis (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inda-foji-gisagabulan (npm)
1 compromised version
Page 483 of 7,328