Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,499 total · sorted newest first- Sep 13, 2026
Malicious code in hariyono-97 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke111 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke3 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke29 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke115 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke119 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke24 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke2 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-92 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke32 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke112 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke15 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke1 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke27 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke106 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke17 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-85 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke110 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke20 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-91 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-99 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-93 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke114 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-89 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke30 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke31 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke11 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke122 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke26 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke16 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-96 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke108 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke109 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke13 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke117 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-90 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke120 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke28 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-95 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke23 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-88 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke22 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-poke21 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke45 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-65 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-75 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke9 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in hariyono-70 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke43 (npm)
1 compromised version
- Sep 13, 2026
Malicious code in haritono-poke7 (npm)
1 compromised version
Page 609 of 7,330