Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-mangut61-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan24-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut22-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangga55-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak78-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis81-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak87-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak54-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut42-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut66-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis8-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangga83-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes83-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut80-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangga91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut61-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis55-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak18-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-menjes17-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendoan26-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut61-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mendut13-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak50-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangga81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangga38-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak50-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-martabak58-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-mangut2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lodeh43-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lepet93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lengko67-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lontong100-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis39-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet15-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis98-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lontong93-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis84-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lumpur96-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet52-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lutis3-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet64-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lengko87-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis39-riris (npm)
1 compromised version
Page 524 of 7,328