Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in ida-ikan24-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jamblang10-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keripik10-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kemplang30-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang28-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kacang10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-keraktelor11-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jus58-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-kembang80-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-jengkol6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai85-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gudeg13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gaplek29-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus57-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk79-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai41-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul67-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gorengan5-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk16-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul66-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getas50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus28-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk91-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk69-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gorengan9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gaplek41-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk36-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai15-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus84-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gaplek91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai46-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gepuk2-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gaplek49-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gorengan94-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gulai37-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus43-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk96-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getas52-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gembus11-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getas87-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getas6-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gudeg66-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-getuk71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul47-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul38-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in chroma-client (PyPI)
1 compromised version
- Sep 13, 2026
Malicious code in chroma-client (PyPI)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul37-breki (npm)
1 compromised version
Page 528 of 7,328