Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-papeda8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-pecel85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-peyek70-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi52-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ongol-ongol61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-peyek39-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi31-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang51-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rawon1-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-pisang32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi61-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi82-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi91-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ongol-ongol48-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangginang45-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rendang92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangi67-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-rangginang70-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi98-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ragi69-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasisayur35-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-oblok97-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasiuduk73-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasiuduk4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasisayur57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-oncom65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasipecel85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasisayur76-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi6-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasiuduk98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-oncom69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasicampur90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasipecel52-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasipecel2-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasisayur57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasisayur69-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-oblok36-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasipecel36-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasicampur97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-oblok3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasiuduk37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasipecel93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasicampur54-apidev (npm)
1 compromised version
Page 522 of 7,328