Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,487 total · sorted newest first- Sep 13, 2026
Malicious code in hendra-donat44-kyuki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos61-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag75-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-donat73-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-donat81-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum92-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubursumsum20-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brongkos13-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bubur60-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal92-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal34-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-dradag71-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-empal12-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan89-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan18-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan78-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan99-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brengkes100-ruro (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan62-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan48-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-botok90-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-botok96-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-botok51-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-botok10-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_salmon-tool (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bika74-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_salamander_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso26-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan82-remi (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan88-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_nightingale_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso97-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso72-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_shrimp-gooddev (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_sole_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_swift_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_wildebeest_requirement (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hemnet (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brengkes62-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_takin_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-brengkes46-sukiwir (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bika13-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan4-breki (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_stingray_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bika8-sluey (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_moth_z3n (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakwan19-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-bakso84-miaww (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hendra-asinan42-riris (npm)
1 compromised version
- Sep 13, 2026
Malicious code in helpless_skunk_z3n (npm)
1 compromised version
Page 595 of 7,330