Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in joviology-pulsar-archaeoastronomy-remark (npm)
- Aug 14, 2025
Malicious code in joviology-fomalhaut-superagent-fetch (npm)
- Aug 14, 2025
Malicious code in joviology-capella-aether-stratosphere (npm)
- Aug 14, 2025
Malicious code in jovian-dependencies-test-mui (npm)
- Aug 14, 2025
Malicious code in jotkaimcswdlzqep (npm)
- Aug 14, 2025
Malicious code in josrep (npm)
- Aug 14, 2025
Malicious code in joqlzuvdafibyhpw (npm)
- Aug 14, 2025
Malicious code in joni-tempe96-breki (npm)
- Aug 14, 2025
Malicious code in joni-telurtahu39-breki (npm)
- Aug 14, 2025
Malicious code in joni-telur59-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-peyek85-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-otak-otak32-breki (npm)
- Aug 14, 2025
Malicious code in joni-nasicampur34-breki (npm)
- Aug 14, 2025
Malicious code in joni-mieayam13-sukiwir (npm)
- Aug 14, 2025
Malicious code in joni-lepet11-breki (npm)
- Aug 14, 2025
Malicious code in joni-kolak58-kuki (npm)
- Aug 14, 2025
Malicious code in jongsukim (npm)
- Aug 14, 2025
Malicious code in jones-promise (npm)
- Aug 14, 2025
Malicious code in jolly-warmth-ddq929-project (npm)
- Aug 14, 2025
Malicious code in joko-tumis71-sukiwir (npm)
- Aug 14, 2025
Malicious code in joko-tiwul69-kuki (npm)
- Aug 14, 2025
Malicious code in joko-ronde53-breki (npm)
- Aug 14, 2025
Malicious code in joko-rangi53-breki (npm)
- Aug 14, 2025
Malicious code in joko-peyek98-sukiwir (npm)
- Aug 14, 2025
Malicious code in joko-naget13-kuki (npm)
- Aug 14, 2025
Malicious code in joko-miebogor90-breki (npm)
- Aug 14, 2025
Malicious code in joko-menjes26-kuki (npm)
- Aug 14, 2025
Malicious code in joko-kue12-breki (npm)
- Aug 14, 2025
Malicious code in joko-gandul28-breki (npm)
- Aug 14, 2025
Malicious code in joko-bubur92-sukiwir (npm)
- Aug 14, 2025
Malicious code in joker388 (npm)
- Aug 14, 2025
Malicious code in joker123-slot (npm)
- Aug 14, 2025
Malicious code in joker123-gaming (npm)
- Aug 14, 2025
Malicious code in joker123 (npm)
- Aug 14, 2025
Malicious code in join-params (npm)
- Aug 14, 2025
Malicious code in joggingo (npm)
- Aug 14, 2025
Malicious code in joenaskgrbpvyuxd (npm)
- Aug 14, 2025
Malicious code in joelma (npm)
- Aug 14, 2025
Malicious code in jodtaar (npm)
- Aug 14, 2025
Malicious code in joddoc (npm)
- Aug 14, 2025
Malicious code in jobweibo (npm)
- Aug 14, 2025
Malicious code in jobpoint (npm)
- Aug 14, 2025
Malicious code in jobmeety (npm)
- Aug 14, 2025
Malicious code in jobcomp (npm)
- Aug 14, 2025
Malicious code in jobcard (npm)
- Aug 14, 2025
Malicious code in job-iteration (npm)
- Aug 14, 2025
Malicious code in jnmirdcugstvxqaz (npm)
- Aug 14, 2025
Malicious code in jnitest (npm)
- Aug 14, 2025
Malicious code in jnisample (npm)
- Aug 14, 2025
Malicious code in jmschirp (npm)
Page 5514 of 6,634