Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,392 total · sorted newest first- Sep 13, 2026
Malicious code in iberia-cache (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-checkout (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-db (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-event (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-cloud (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-database (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-jira (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umabu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibc (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umabtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-ufu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanu-otabauai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-umauf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-uf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-otaima-ufua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umuma (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iban-otabauai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-otauai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umum (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanan (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umumau (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-uauf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-analytics (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-ota-umumauf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-otabauai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-api (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-api-client (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanun-otai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-umumauf (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibantay (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iberia-admin (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otau-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibercnudjtysgpfk (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-ota-ufua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibanuni-otai-ufua (npm)
1 compromised version
- Sep 13, 2026
Malicious code in ibadge (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-ota-umit (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-ota-umaitu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otana-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otaanumai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otabaumai-umaibtu (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i2g-rosetta (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iadvice (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-otaitu-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iambtwob (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iba-ota-umita (npm)
1 compromised version
- Sep 13, 2026
Malicious code in iarna (npm)
1 compromised version
- Sep 13, 2026
Malicious code in i18next-xlsx-to-json (npm)
1 compromised version
Page 538 of 7,328