Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-toge15-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-wajit25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tongseng2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tumis57-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe96-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tiwul90-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tiwul15-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi18-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi57-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-toge11-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tumis67-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe74-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tumis7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi94-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tiwul29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-wajit97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ubi24-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe59-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tongseng79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-toge10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tongseng13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tek63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu28-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak33-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-teh81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak55-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu27-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak29-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu38-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-teh86-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tek39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-telur2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-telur63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe19-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tapai81-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu27-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu23-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tek81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu92-kuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-teh51-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-telurtahu64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak76-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-taiwan37-sukiwir (npm)
1 compromised version
Page 519 of 7,328