Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,487 total · sorted newest first- Sep 13, 2026
Malicious code in hendra-gulai31-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gepuk13-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ikan9-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gorengan91-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gado-gado78-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-enting8-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gulai71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gado-gado54-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ikan65-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gudeg2-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-getuk88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gorengan44-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-getas20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gado-gado51-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-getas51-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gorengan89-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gepuk4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gembus69-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gepuk3-tititugel (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gepuk57-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gado-gado76-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ikan93-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-gulai62-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-getuk64-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-ikan23-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos90-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum1-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal90-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum17-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos17-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal62-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-buburayam65-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag28-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag42-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal63-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dodol23-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum63-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal42-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-buburayam67-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag58-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-enting13-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum95-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos49-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal18-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal50-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag29-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubur91-breki (npm)
1 compromised version
Page 594 of 7,330