Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in jmpreader (npm)
- Aug 14, 2025
Malicious code in jmorales (npm)
- Aug 14, 2025
Malicious code in jmids (npm)
- Aug 14, 2025
Malicious code in jmibody (npm)
- Aug 14, 2025
Malicious code in jltwaiter (npm)
- Aug 14, 2025
Malicious code in jlibredis (npm)
- Aug 14, 2025
Malicious code in jlibclang (npm)
- Aug 14, 2025
Malicious code in jkgithub (npm)
- Aug 14, 2025
Malicious code in jjeg1979-palindrome (npm)
- Aug 14, 2025
Malicious code in jitsi-meet-logger (npm)
- Aug 14, 2025
Malicious code in jira-agile-api (npm)
- Aug 14, 2025
Malicious code in jinqjs (npm)
- Aug 14, 2025
Malicious code in jinqitest (npm)
- Aug 14, 2025
Malicious code in jimuskin (npm)
- Aug 14, 2025
Malicious code in jimplunk (npm)
- Aug 14, 2025
Malicious code in jimmis (npm)
- Aug 14, 2025
Malicious code in jimdo-web-library (npm)
- Aug 14, 2025
Malicious code in jimbooth (npm)
- Aug 14, 2025
Malicious code in jima23-frame-print (npm)
- Aug 14, 2025
Malicious code in jillingme (npm)
- Aug 14, 2025
Malicious code in jiinfo (npm)
- Aug 14, 2025
Malicious code in jigsolver (npm)
- Aug 14, 2025
Malicious code in jigsaw_zfcc1_hc9s5_blossom (npm)
- Aug 14, 2025
Malicious code in jigsaw_uwy3e_clwpf_plume (npm)
- Aug 14, 2025
Malicious code in jigsaw_a6r5x_yr1si_lake (npm)
- Aug 14, 2025
Malicious code in jiduan-ziwo-jiushiwang (npm)
- Aug 14, 2025
Malicious code in jibo-sdk (npm)
- Aug 14, 2025
Malicious code in jiandehaoren-xinmao (npm)
- Aug 14, 2025
Malicious code in jiami-jiemi-jishu (npm)
- Aug 14, 2025
Malicious code in jiababe (npm)
- Aug 14, 2025
Malicious code in jhipster-transasia-client (npm)
- Aug 14, 2025
Malicious code in jhdesidl (npm)
- Aug 14, 2025
Malicious code in jhashids (npm)
- Aug 14, 2025
Malicious code in jh-rce-package (npm)
- Aug 14, 2025
Malicious code in jh-private-package (npm)
- Aug 14, 2025
Malicious code in jh-one-awesome-package (npm)
- Aug 14, 2025
Malicious code in jh-another-package (npm)
- Aug 14, 2025
Malicious code in jgltut (npm)
- Aug 14, 2025
Malicious code in jgjgjgjgjg (npm)
- Aug 14, 2025
Malicious code in jgjgig (npm)
- Aug 14, 2025
Malicious code in jgdzr1 (npm)
- Aug 14, 2025
Malicious code in jfrog-midgard (npm)
- Aug 14, 2025
Malicious code in jfrog-asgard (npm)
- Aug 14, 2025
Malicious code in jfisher (npm)
- Aug 14, 2025
Malicious code in jfedmsg (npm)
- Aug 14, 2025
Malicious code in jfchat (npm)
- Aug 14, 2025
Malicious code in jexnpm (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in jewel_z0tl4_70rlp_zephyr (npm)
- Aug 14, 2025
Malicious code in jewel_igs6f_xm0z2_tundra (npm)
- Aug 14, 2025
Malicious code in jewel_h5ml2_8jxas_verdant (npm)
Page 5515 of 6,634