Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ilal-poke12 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikea-jssdk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iitlab (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ijkgsbnvlowxayfz (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke113 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikgnahexlofdpmzt (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikawgpbjdoskrnfl (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke116 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikregeer (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ijsdqbfxkrgwcazk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke18 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iiobloa-minisspe-amiialo (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke110 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iixalim-notthedevs (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikrambaguette (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke102 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke107 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke103 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iinspre (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke115 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke111 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikvqlxtofwbzeknc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke14 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke104 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke112 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikoeptgnfzyxcasm (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikizler (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ikst (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilaaas (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke19 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke105 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke109 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke106 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ilal-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignore-doc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-test-less-loader-kaus (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ignite-ui-full (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-amber-gbr256-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-lightning-omh887-project (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihsantariq (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ihsancroissant (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iguana-sequoia-pou419-project (npm)
1 compromised version
Page 513 of 7,328