Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ilal-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke34 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke52 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke60 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke53 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke56 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke47 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke58 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke50 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke44 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke25 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke5 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke42 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke62 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke57 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke68 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke64 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke46 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke33 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke59 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke39 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke61 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke38 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke48 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke51 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke7 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke36 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke41 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke37 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke63 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke35 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke69 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke54 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke100 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke10 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikramcroissant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikea-test (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke101 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke108 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke2 (npm)
1 compromised version
Page 512 of 7,328