Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in juniper-a7ce1-utbt8-rose-project (npm)
- Aug 14, 2025
Malicious code in jungle_wo2d8_qtgjw_reef (npm)
- Aug 14, 2025
Malicious code in jungle_tv1va_uk75e_banyan (npm)
- Aug 14, 2025
Malicious code in jungle_c3r3f_pqkjf_antelope (npm)
- Aug 14, 2025
Malicious code in jungle_4wnfa_owrem_quarry (npm)
- Aug 14, 2025
Malicious code in jungle-yeti-ndk502-project (npm)
- Aug 14, 2025
Malicious code in jungle-xylophone-jcox (npm)
- Aug 14, 2025
Malicious code in jungle-xenon-nux357-project (npm)
- Aug 14, 2025
Malicious code in jungle-waterfall-xck202-project (npm)
- Aug 14, 2025
Malicious code in jungle-thunder-fko445-project (npm)
- Aug 14, 2025
Malicious code in jungle-r1kay-gw0aj-frost-project (npm)
- Aug 14, 2025
Malicious code in jungle-paradise-vkl719-project (npm)
- Aug 14, 2025
Malicious code in jungle-orange-j6im (npm)
- Aug 14, 2025
Malicious code in jungle-nectarine-ynp1 (npm)
- Aug 14, 2025
Malicious code in jungle-mist-ldk173-project (npm)
- Aug 14, 2025
Malicious code in jungle-kiwi-sgj290-project (npm)
- Aug 14, 2025
Malicious code in jungle-kite-gzo304-project (npm)
- Aug 14, 2025
Malicious code in jungle-island-fttr (npm)
- Aug 14, 2025
Malicious code in jungle-forest-nhn122-project (npm)
- Aug 14, 2025
Malicious code in jungle-everest-mvi676-project (npm)
- Aug 14, 2025
Malicious code in jungle-butterfly-ifa426-project (npm)
- Aug 14, 2025
Malicious code in jungle-bamboo-oze282-project (npm)
- Aug 14, 2025
Malicious code in jungle-arctic-ezi750-project (npm)
- Aug 14, 2025
Malicious code in jungle-apple-m9oa (npm)
- Aug 14, 2025
Malicious code in jungle-8hy2a-ztr5o-nymph-project (npm)
- Aug 14, 2025
Malicious code in jungle-7kai9-gp0zb-bramble-project (npm)
- Aug 14, 2025
Malicious code in jungle-5szeh-bvx05-zenith-project (npm)
- Aug 14, 2025
Malicious code in jumpshot (npm)
- Aug 14, 2025
Malicious code in jumpcat (npm)
- Aug 14, 2025
Malicious code in jumeteor (npm)
- Aug 14, 2025
Malicious code in juliet-zeq-project (npm)
- Aug 14, 2025
Malicious code in juliet-z51-project (npm)
- Aug 14, 2025
Malicious code in juliet-ygl-project (npm)
- Aug 14, 2025
Malicious code in juliet-yam-xray-kopkq (npm)
- Aug 14, 2025
Malicious code in juliet-yam-vpsj (npm)
- Aug 14, 2025
Malicious code in juliet-yam-bravo-ipljp (npm)
- Aug 14, 2025
Malicious code in juliet-xw8-project (npm)
- Aug 14, 2025
Malicious code in juliet-wye-project (npm)
- Aug 14, 2025
Malicious code in juliet-watermelon-gemz (npm)
- Aug 14, 2025
Malicious code in juliet-vanilla-ujxd (npm)
- Aug 14, 2025
Malicious code in juliet-ugli-date-sveuh (npm)
- Aug 14, 2025
Malicious code in juliet-strawberry-rcij (npm)
- Aug 14, 2025
Malicious code in juliet-strawberry-quince-ttgda (npm)
- Aug 14, 2025
Malicious code in juliet-sierra-pxyi (npm)
- Aug 14, 2025
Malicious code in juliet-romeo-whiskey-vnczk (npm)
- Aug 14, 2025
Malicious code in juliet-romeo-lima-vlkto (npm)
- Aug 14, 2025
Malicious code in juliet-romeo-apma (npm)
- Aug 14, 2025
Malicious code in juliet-rainbow-mhkp (npm)
- Aug 14, 2025
Malicious code in juliet-quercus-s6mb (npm)
- Aug 14, 2025
Malicious code in juliet-quebec-wfzb (npm)
Page 5510 of 6,634