Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in juliet-papa-zkgw (npm)
- Aug 14, 2025
Malicious code in juliet-papa-qhqr (npm)
- Aug 14, 2025
Malicious code in juliet-november-xtzp (npm)
- Aug 14, 2025
Malicious code in juliet-november-quebec-uutrb (npm)
- Aug 14, 2025
Malicious code in juliet-november-mike-zwjja (npm)
- Aug 14, 2025
Malicious code in juliet-mzv-project (npm)
- Aug 14, 2025
Malicious code in juliet-m9z-project (npm)
- Aug 14, 2025
Malicious code in juliet-lima-rhzc (npm)
- Aug 14, 2025
Malicious code in juliet-lighthouse-il5w (npm)
- Aug 14, 2025
Malicious code in juliet-ku5-project (npm)
- Aug 14, 2025
Malicious code in juliet-kiwi-aiyw (npm)
- Aug 14, 2025
Malicious code in juliet-jalapeno-lq4a (npm)
- Aug 14, 2025
Malicious code in juliet-golf-uniform-dayla (npm)
- Aug 14, 2025
Malicious code in juliet-foxtrot-victor-cydzt (npm)
- Aug 14, 2025
Malicious code in juliet-exf-project (npm)
- Aug 14, 2025
Malicious code in juliet-erk-project (npm)
- Aug 14, 2025
Malicious code in juliet-echo-fbqi (npm)
- Aug 14, 2025
Malicious code in juliet-delta-yankee-xihfn (npm)
- Aug 14, 2025
Malicious code in juliet-date-livf (npm)
- Aug 14, 2025
Malicious code in juliet-banana-itqc (npm)
- Aug 14, 2025
Malicious code in juliet-apple-faqu (npm)
- Aug 14, 2025
Malicious code in juliet-9zy-project (npm)
- Aug 14, 2025
Malicious code in juliet-7ih-project (npm)
- Aug 14, 2025
Malicious code in juliet-5vh-project (npm)
- Aug 14, 2025
Malicious code in juliet-2oh-project (npm)
- Aug 14, 2025
Malicious code in juliet-0nj-project (npm)
- Aug 14, 2025
Malicious code in julestext (npm)
- Aug 14, 2025
Malicious code in jukubox (npm)
- Aug 14, 2025
Malicious code in jukepi (npm)
- Aug 14, 2025
Malicious code in juicip (npm)
- Aug 14, 2025
Malicious code in juicer-plugin (npm)
- Aug 14, 2025
Malicious code in juiced (npm)
- Aug 14, 2025
Malicious code in juhuwai (npm)
- Aug 14, 2025
Malicious code in juffer-xor (npm)
- Aug 14, 2025
Malicious code in juetpy (npm)
- Aug 14, 2025
Malicious code in judith-m (npm)
- Aug 14, 2025
Malicious code in judgeme (npm)
- Aug 14, 2025
Malicious code in judejude (npm)
- Aug 14, 2025
Malicious code in jubilee-apple-oki112-project (npm)
- Aug 14, 2025
Malicious code in jtstream (npm)
- Aug 14, 2025
Malicious code in jtr-hbs (npm)
- Aug 14, 2025
Malicious code in jtlibrary (npm)
- Aug 14, 2025
Malicious code in jtgnalkypqrzxhes (npm)
- Aug 14, 2025
Malicious code in jtextgame (npm)
- Aug 14, 2025
Malicious code in jtb-mytrips (npm)
- Aug 14, 2025
Malicious code in jsua-rux (npm)
- Aug 14, 2025
Malicious code in jstoolnpp (npm)
- Aug 14, 2025
Malicious code in jstiuzdorkkfcmxp (npm)
- Aug 14, 2025
Malicious code in jsteward (npm)
- Aug 14, 2025
Malicious code in jsrsasign-browser (npm)
Page 5511 of 6,634