Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-taiwan88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tapai12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe39-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-teh71-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sroto92-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-takokak88-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-telurtahu34-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-teh49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tapai22-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-telur43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu89-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tempe4-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-tahu3-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel87-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serabi47-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur43-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur17-devapp (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur7-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sate60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sroto49-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serimuka27-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sroto52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serimuka21-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serimuka94-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serabi89-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur98-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sate14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sate32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto76-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serimuka67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sasag25-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-semur39-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sasag87-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto84-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sego60-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto90-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sasag37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sroto43-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-soto18-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sroto66-sukiwir (npm)
1 compromised version
Page 520 of 7,328