Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in ida-gandul100-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting56-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gandul24-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting39-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting65-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gado-gado10-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gado-gado74-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting60-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-gado-gado47-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol22-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal18-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-donat18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol70-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dradag70-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dradag78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal37-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting24-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubursumsum36-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal18-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dradag80-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol92-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-enting20-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dradag60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal15-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol60-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal80-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal27-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal23-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal83-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-dodol25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal77-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-donat78-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-empal98-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur1-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur55-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakwan79-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-botok37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-botok50-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brongkos40-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-botok73-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes53-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes68-pore (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes50-breki (npm)
1 compromised version
Page 529 of 7,328