Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ilal-poke9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke74 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke83 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke95 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke86 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke76 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke71 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke81 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke87 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke88 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke98 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke84 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke93 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke99 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke82 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke85 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke97 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke8 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke73 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke79 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke72 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke78 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilang-21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke4 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke65 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke40 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke55 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke49 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke67 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke6 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke66 (npm)
1 compromised version
Page 511 of 7,328