Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 17, 2026
Malicious code in lisa-jamblang60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jengkol46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jamblang72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jamblang9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jamblang16-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gudeg59-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gulai32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jengkol34-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gulai61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gulai65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gudeg42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gudeg30-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gulai30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jamblang15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gulai37-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-jus17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gandul81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-esdoger24-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gaplek6-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gorengan62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gembus100-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas75-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk69-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk10-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado88-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-esdoger78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gorengan43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gaplek22-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado20-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-esdoger11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gepuk92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gembus72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gepuk30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas76-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gudeg13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gaplek51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gembus37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk11-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas23-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas81-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getuk80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-esdoger6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado86-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-esdoger16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gandul37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gandul10-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gorengan76-kyuki (npm)
1 compromised version
Page 95 of 7,312