Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,383 total · sorted newest first- Sep 13, 2026
Malicious code in ida-brongkos79-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bika85-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bika91-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur42-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakwan96-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur68-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur86-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur42-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brongkos75-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brongkos14-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brongkos2-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-botok22-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubursumsum28-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes46-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bubur44-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-brengkes64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_ostrich_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_snail_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_leech_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso54-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso42-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso42-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_pig_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan46-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_otter_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakwan25-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_orca_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan98-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_prawn_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso73-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan17-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan46-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan64-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakwan74-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_sheep_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_mammal_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso91-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_stork_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_rhinoceros_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso58-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in id-cookies (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso55-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_marsupial_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-bakso49-crottsekebon (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ida-asinan93-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_chimpanzee_maroon-94 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_condor_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in icy_landfowl_z3n (npm)
1 compromised version
Page 530 of 7,328