Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-liwet20-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lengko14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lepet22-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis52-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis1-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lumpur30-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis58-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis15-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lodeh95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis47-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lodeh83-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet21-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lontong92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lupis9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lontong72-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lepet45-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-liwet98-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis56-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lontong24-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lengko60-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue72-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue95-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik97-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue8-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue30-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue35-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupang28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik7-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue97-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis26-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue87-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat8-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik40-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis45-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik3-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis29-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis44-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue27-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis11-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue14-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue11-miaww (npm)
1 compromised version
Page 525 of 7,328