Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in ida-klanting9-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting50-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting47-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kolak84-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kolak98-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klanting6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klentik78-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kolak66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik5-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketan57-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-klipo26-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ketoprak86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kepok28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jus51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang86-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan23-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jengkol50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang93-apidev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang3-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kemplang12-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keraktelor75-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan41-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kemplang86-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jus45-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jengkol31-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang17-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan36-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kentang99-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kemplang73-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kembang36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jus99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan55-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jengkol13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keraktelor90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang51-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan99-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-ikan31-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kemplang28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kembang48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keraktelor74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kepok40-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang17-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang96-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kepok52-riris (npm)
1 compromised version
Page 527 of 7,328