Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,466 total · sorted newest first- Sep 13, 2026
Malicious code in hendra-lumpur52-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-liwet83-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis93-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lodeh35-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lengko1-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupat19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis61-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis9-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lengko11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-liwet77-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis38-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupat25-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lengko85-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lupis63-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lupis25-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-liwet30-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang83-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lepet70-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lontong81-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis72-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lepet93-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupat96-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis100-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lontong66-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lumpur11-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis91-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lumpur97-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang75-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis39-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lodeh77-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis13-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lepet100-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lumpur61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupat11-wekto (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lepet37-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lupis41-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lengko44-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-lapis4-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue78-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue62-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue95-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang64-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang53-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue81-sumpek (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang62-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue64-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue62-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang68-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kue63-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-kupang56-breki (npm)
1 compromised version
Page 590 of 7,330