Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,372 total · sorted newest first- Sep 13, 2026
Malicious code in imugiay-avg-daiugadajuj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dniemf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudgai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafgoacvsigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dnif (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dnieamnfaa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfnaiyugpa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafagi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamfnugpa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiy-ajvoig-daicutafamajjauak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in inadequate-emerald-porpoise (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafacgai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dnieamnfaupa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-ddafgi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafgoaigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dniemnf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnieamnfaiupa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-dudafgacvsigai (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-avg-daigajuj (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-daiugjdfij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-iayafucaamrfuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dacutamaak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dnie (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimaumfaagf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-daicutamaak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvg-dnieamnfaupa (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-iayaarfuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-daiugadajdfij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimaumfaf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-daiugjij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimaumfagfaatugf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-ijimaumfagfaatugf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-iayaafuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-ijuf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-daicutafamajauak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-ijf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dacmak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dn (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-daicutaamaak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimamf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimamff (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-daiugadajdufij (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avig-ijimaumfafaatugf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-daicutaamajak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugay-avg-ijimaumfagaaugf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dactmak (npm)
1 compromised version
- Sep 13, 2026
Malicious code in imugiay-ajvog-dacak (npm)
1 compromised version
Page 493 of 7,328