Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in jewel-zephyr-lbq273-project (npm)
- Aug 14, 2025
Malicious code in jewel-yjsw3-7iemy-flame-project (npm)
- Aug 14, 2025
Malicious code in jewel-thistle-dot828-project (npm)
- Aug 14, 2025
Malicious code in jewel-reef-bbu982-project (npm)
- Aug 14, 2025
Malicious code in jewel-quasar-wpv095-project (npm)
- Aug 14, 2025
Malicious code in jewel-opaline-mac025-project (npm)
- Aug 14, 2025
Malicious code in jewel-nugget-cuc525-project (npm)
- Aug 14, 2025
Malicious code in jewel-nautilus-wyc463-project (npm)
- Aug 14, 2025
Malicious code in jewel-kiwi-skz312-project (npm)
- Aug 14, 2025
Malicious code in jewel-izrlu-qnwps-dynamo-project (npm)
- Aug 14, 2025
Malicious code in jewel-hxjd6-wrdqf-willow-project (npm)
- Aug 14, 2025
Malicious code in jewel-hollow-sle513-project (npm)
- Aug 14, 2025
Malicious code in jewel-gorilla-sui317-project (npm)
- Aug 14, 2025
Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm)
- Aug 14, 2025
Malicious code in jewel-fjord-soh936-project (npm)
- Aug 14, 2025
Malicious code in jewel-delta-xbh835-project (npm)
- Aug 14, 2025
Malicious code in jewel-delta-bbo611-project (npm)
- Aug 14, 2025
Malicious code in jewel-c2ogk-xj2sg-glow-project (npm)
- Aug 14, 2025
Malicious code in jewel-5ue47-k2dx1-whisper-project (npm)
- Aug 14, 2025
Malicious code in jetty-xigua-p5wn (npm)
- Aug 14, 2025
Malicious code in jetty-shack-fmik (npm)
- Aug 14, 2025
Malicious code in jetty-ocean-vznq (npm)
- Aug 14, 2025
Malicious code in jetty-lettuce-q489 (npm)
- Aug 14, 2025
Malicious code in jetty-carrot-tdb4 (npm)
- Aug 14, 2025
Malicious code in jetty-blackhole-fpot (npm)
- Aug 14, 2025
Malicious code in jetpack-js-tools (npm)
- Aug 14, 2025
Malicious code in jetcms (npm)
- Aug 14, 2025
Malicious code in jestjs (npm)
- Aug 14, 2025
Malicious code in jest-sync-json-reporter (npm)
- Aug 14, 2025
Malicious code in jest-nextjs-wormhole-hadron (npm)
- Aug 14, 2025
Malicious code in jest-mocha-parcel-hyperion (npm)
- Aug 14, 2025
Malicious code in jest-miranda-child-process-deneb (npm)
- Aug 14, 2025
Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm)
- Aug 14, 2025
Malicious code in jermiah (npm)
- Aug 14, 2025
Malicious code in jenkins-master (npm)
- Aug 14, 2025
Malicious code in jeminis (npm)
- Aug 14, 2025
Malicious code in jellyfish-yellow-dar237-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-waterfall-xwl317-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-umbra-jgp412-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-reef-rco151-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-oak-hrf615-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-lilypad-urf910-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-giraffe-lxp049-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-dragon-rqn676-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-cloud-gpo655-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-bonfire-tuv847-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-bamboo-zhn735-project (npm)
- Aug 14, 2025
Malicious code in jellyfish-arctic-chz647-project (npm)
- Aug 14, 2025
Malicious code in jellyderp (npm)
- Aug 14, 2025
Malicious code in jekyll-thermochronology-farout-sagitta (npm)
Page 5516 of 6,634