Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-sate26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-serabi1-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel97-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujaksoto20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ronde40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel30-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambalado6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer75-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambalado51-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambalado36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel39-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel49-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel77-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel34-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujaksoto32-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ronde90-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ruwet43-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ruwet86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ruwet86-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rojak83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujak58-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujak89-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-saguer6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ronde7-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujak79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel33-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ronde14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujaksoto27-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-sambel6-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rujaksoto10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ongol-ongol21-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang5-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-peyek80-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rawon7-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi10-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi83-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi47-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangginang57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi17-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-pisang1-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi62-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi35-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rawon40-sukiwir (npm)
1 compromised version
Page 521 of 7,328