Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-nasi88-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-moci84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mie71-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miebogor56-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieayam37-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee50-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mie19-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieayam73-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-naget41-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieayam5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieayam4-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee22-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieayam68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-naget41-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-naget4-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miebogor4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-moci26-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-moci32-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-naget19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee99-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-moci50-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mie66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi18-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mieaceh45-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee98-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee41-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mie68-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-nasi16-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miebogor54-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee10-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-miemee99-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-naget67-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes97-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan59-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendut4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes50-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendut84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut16-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan62-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes49-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak64-sukiwir (npm)
1 compromised version
Page 523 of 7,328