Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
330,055 total · sorted newest first- Sep 10, 2026
Malicious code in fajar-serabi44-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur60-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto14-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur64-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur47-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto96-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto37-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu43-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto27-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek35-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu26-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur43-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto79-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur42-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahutek28-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto88-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto42-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serimuka69-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur54-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto27-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto78-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto52-tititugel (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi96-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi98-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu98-kyuki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-soto44-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serimuka22-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur85-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sroto93-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu6-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu32-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-serabi87-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-tahu76-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sasag22-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sate47-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sambel61-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur15-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-semur18-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sate39-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sate40-miaww (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sasag90-sluey (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sego70-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sego54-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sambel28-pore (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sasag14-sukiwir (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sambel44-riris (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sambel31-ruro (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sambalado85-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sasag83-breki (npm)
1 compromised version
- Sep 10, 2026
Malicious code in fajar-sasag19-riris (npm)
1 compromised version
Page 7 of 6,602