Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in js-sha7 (npm)
- Aug 14, 2025
Malicious code in js-sequence-diagrams (npm)
- Aug 14, 2025
Malicious code in js-rha3 (npm)
- Aug 14, 2025
Malicious code in js-regular (npm)
- Aug 14, 2025
Malicious code in js-qha3 (npm)
- Aug 14, 2025
Malicious code in js-presets (npm)
- Aug 14, 2025
Malicious code in js-mods (npm)
- Aug 14, 2025
Malicious code in js-donkey (npm)
- Aug 14, 2025
Malicious code in js-cha3 (npm)
- Aug 14, 2025
Malicious code in js-base64-int (npm)
- Aug 14, 2025
Malicious code in js-3ha3 (npm)
- Aug 14, 2025
Malicious code in jrswizzle (npm)
- Aug 14, 2025
Malicious code in jrplidar (npm)
- Aug 14, 2025
Malicious code in jreplay (npm)
- Aug 14, 2025
Malicious code in jreject (npm)
- Aug 14, 2025
Malicious code in jradius (npm)
- Aug 14, 2025
Malicious code in jr-sha3 (npm)
- Aug 14, 2025
Malicious code in jquey (npm)
- Aug 14, 2025
Malicious code in jquerz (npm)
- Aug 14, 2025
Malicious code in jqueryprotectjs (npm)
- Aug 14, 2025
Malicious code in jquery.ui.widget.js (npm)
1 compromised version
- Aug 14, 2025
Malicious code in jquery.ui.mouse.js (npm)
1 compromised version
- Aug 14, 2025
Malicious code in jquery-ui.ruler (npm)
- Aug 14, 2025
Malicious code in jquery-ui-slider-pips (npm)
- Aug 14, 2025
Malicious code in jquery-ui-i18n (npm)
- Aug 14, 2025
Malicious code in jquery-poolparty (npm)
- Aug 14, 2025
Malicious code in jquery-impromptu (npm)
- Aug 14, 2025
Malicious code in jquery-double-tap-to-go (npm)
- Aug 14, 2025
Malicious code in jquery-app-banner (npm)
- Aug 14, 2025
Malicious code in jquery-2.1 (npm)
- Aug 14, 2025
Malicious code in jqmobile (npm)
- Aug 14, 2025
Malicious code in jqfplwieacbzvrsk (npm)
- Aug 14, 2025
Malicious code in jqeury (npm)
- Aug 14, 2025
Malicious code in jqdc (npm)
- Aug 14, 2025
Malicious code in jqalendar (npm)
- Aug 14, 2025
Malicious code in jq-sha3 (npm)
- Aug 14, 2025
Malicious code in jpknzukxghlvosbc (npm)
- Aug 14, 2025
Malicious code in jphvzudbgfmiyrxt (npm)
- Aug 14, 2025
Malicious code in jparada (npm)
- Aug 14, 2025
Malicious code in jpajxet (npm)
- Aug 14, 2025
Malicious code in jp_postal_codes (npm)
- Aug 14, 2025
Malicious code in jp.oripaone (npm)
1 compromised version
- Aug 14, 2025
Malicious code in joy_zhxtt_yu975_zenith (npm)
- Aug 14, 2025
Malicious code in joy_qvtit_zz7lg_wander (npm)
- Aug 14, 2025
Malicious code in joy_lggkg_opf8t_solstice (npm)
- Aug 14, 2025
Malicious code in joy_kzsfu_djgbf_xylophone (npm)
- Aug 14, 2025
Malicious code in joy_ajgx4_wwrqd_jasmine (npm)
- Aug 14, 2025
Malicious code in joy_9mnpk_yjdfb_kryptonite (npm)
- Aug 14, 2025
Malicious code in joy_4trak_jh2tm_labyrinth (npm)
- Aug 14, 2025
Malicious code in joviology-shelljs-sass-loader-areology (npm)
Page 5513 of 6,634