Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,355 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @juigorg/voluptates-aperiam (npm)
- Aug 14, 2025
Malicious code in @juigorg/veniam-alias-deleniti (npm)
- Aug 14, 2025
Malicious code in @juigorg/ullam-accusamus-animi (npm)
- Aug 14, 2025
Malicious code in @juigorg/similique-sit (npm)
- Aug 14, 2025
Malicious code in @juigorg/similique-non (npm)
- Aug 14, 2025
Malicious code in @juigorg/similique-ab (npm)
- Aug 14, 2025
Malicious code in @juigorg/sed-pariatur (npm)
- Aug 14, 2025
Malicious code in @juigorg/rerum-dignissimos-ipsam (npm)
- Aug 14, 2025
Malicious code in @juigorg/ratione-officiis-placeat (npm)
- Aug 14, 2025
Malicious code in @juigorg/quo-atque-libero (npm)
- Aug 14, 2025
Malicious code in @juigorg/quisquam-animi (npm)
- Aug 14, 2025
Malicious code in @juigorg/quibusdam-sapiente (npm)
- Aug 14, 2025
Malicious code in @juigorg/quia-veritatis-unde (npm)
- Aug 14, 2025
Malicious code in @juigorg/quas-consequatur (npm)
- Aug 14, 2025
Malicious code in @juigorg/placeat-vitae-porro (npm)
- Aug 14, 2025
Malicious code in @juigorg/placeat-quo (npm)
- Aug 14, 2025
Malicious code in @juigorg/perspiciatis-dolorem-magnam (npm)
- Aug 14, 2025
Malicious code in @juigorg/odio-repellat (npm)
- Aug 14, 2025
Malicious code in @juigorg/nisi-quo (npm)
- Aug 14, 2025
Malicious code in @juigorg/necessitatibus-est-dolorum (npm)
- Aug 14, 2025
Malicious code in @juigorg/mollitia-sint (npm)
- Aug 14, 2025
Malicious code in @juigorg/minima-ratione (npm)
- Aug 14, 2025
Malicious code in @juigorg/laboriosam-quidem (npm)
- Aug 14, 2025
Malicious code in @juigorg/ipsam-consequatur (npm)
- Aug 14, 2025
Malicious code in @juigorg/in-eaque-magni (npm)
- Aug 14, 2025
Malicious code in @juigorg/harum-aliquam (npm)
- Aug 14, 2025
Malicious code in @juigorg/facere-eveniet-laudantium (npm)
- Aug 14, 2025
Malicious code in @juigorg/ex-possimus (npm)
- Aug 14, 2025
Malicious code in @juigorg/eveniet-nostrum-labore (npm)
- Aug 14, 2025
Malicious code in @juigorg/et-exercitationem (npm)
- Aug 14, 2025
Malicious code in @juigorg/error-molestias (npm)
- Aug 14, 2025
Malicious code in @juigorg/enim-exercitationem (npm)
- Aug 14, 2025
Malicious code in @juigorg/eius-debitis (npm)
- Aug 14, 2025
Malicious code in @juigorg/dolores-deleniti-sit (npm)
- Aug 14, 2025
Malicious code in @juigorg/doloremque-sint-labore (npm)
- Aug 14, 2025
Malicious code in @juigorg/cum-delectus (npm)
- Aug 14, 2025
Malicious code in @juigorg/corrupti-corrupti-minima (npm)
- Aug 14, 2025
Malicious code in @juigorg/corporis-ipsum-nulla (npm)
- Aug 14, 2025
Malicious code in @juigorg/beatae-ab-aspernatur (npm)
- Aug 14, 2025
Malicious code in @juigorg/aperiam-veniam-dolorem (npm)
- Aug 14, 2025
Malicious code in @juigorg/animi-facere (npm)
- Aug 14, 2025
Malicious code in @jquense/component-playground (npm)
- Aug 14, 2025
Malicious code in @iptm-components/intl (npm)
- Aug 14, 2025
Malicious code in @ice-idp/webpack (npm)
- Aug 14, 2025
Malicious code in @ice-desktop/uikit-whitelabel (npm)
- Aug 14, 2025
Malicious code in @ice-desktop/hub (npm)
- Aug 14, 2025
Malicious code in @ibm-ptc/greet-me (npm)
- Aug 14, 2025
Malicious code in @hopper-b2b/volaris (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in @hopper-b2b/utilities (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in @hopper-b2b/ui (npm)
2 compromised versions
Page 5177 of 6,668