Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,378 total · sorted newest first- Sep 13, 2026
Malicious code in ida-kue58-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue57-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue6-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik48-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-lapis32-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik59-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik25-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue91-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kripik45-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat82-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue48-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue12-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat23-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue17-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue81-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kupat92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue97-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue65-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kue29-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik13-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klipo64-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketan88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik5-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klipo40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik94-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak35-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kolak59-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketan83-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klipo8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik53-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kolak40-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak4-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak2-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klentik24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketan49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klentik98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting71-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting50-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting47-miaww (npm)
1 compromised version
Page 526 of 7,328