Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 17, 2026
Malicious code in lisa-getas63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gandul17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado55-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gado-gado8-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gembus35-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-enting89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-gaplek22-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-getas76-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brengkes84-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam78-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubur69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-donat93-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok73-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos67-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal62-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dodol17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal1-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-donat56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dodol81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-enting81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal39-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubur5-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubursumsum30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dradag98-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-dodol25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubur56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brengkes3-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubur33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brengkes44-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok64-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal58-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-buburayam74-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-botok5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-empal14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubursumsum4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-brongkos38-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-donat50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in lisa-bubursumsum21-miaww (npm)
1 compromised version
Page 96 of 7,312