Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in javacuda (npm)
- Aug 14, 2025
Malicious code in java-validate-monitor-link-private (npm)
- Aug 14, 2025
Malicious code in java-fork-byte-double-epsilon (npm)
- Aug 14, 2025
Malicious code in jaticker (npm)
- Aug 14, 2025
Malicious code in jaspilite (npm)
- Aug 14, 2025
Malicious code in jasper-yzxyc-s87r4-star-project (npm)
- Aug 14, 2025
Malicious code in jasper-repository (npm)
- Aug 14, 2025
Malicious code in jasper-qopud-py5vt-paradise-project (npm)
- Aug 14, 2025
Malicious code in jasper-fj3y3-aiha8-orbit-project (npm)
- Aug 14, 2025
Malicious code in jasper-avbkv-p4win-lavender-project (npm)
- Aug 14, 2025
Malicious code in jasper-95fp6-txeo1-xenith-project (npm)
- Aug 14, 2025
Malicious code in jasper-6rm7t-t2w99-solace-project (npm)
- Aug 14, 2025
Malicious code in jasper-43bbw-2obmm-vortex-project (npm)
- Aug 14, 2025
Malicious code in jasmine_smycx_tjmmc_cascade (npm)
- Aug 14, 2025
Malicious code in jasmine_igjpe_a7kgl_arcade (npm)
- Aug 14, 2025
Malicious code in jasmine_i4oid_q9bdd_dawn (npm)
- Aug 14, 2025
Malicious code in jasmine_a9gho_9fr2f_drizzle (npm)
- Aug 14, 2025
Malicious code in jasmine_9nnaq_beblx_ember (npm)
- Aug 14, 2025
Malicious code in jasmine_1u5ay_6cqvo_aroma (npm)
- Aug 14, 2025
Malicious code in jasmine-xanadu-law175-project (npm)
- Aug 14, 2025
Malicious code in jasmine-whirlpool-wbx348-project (npm)
- Aug 14, 2025
Malicious code in jasmine-whale-pvs490-project (npm)
- Aug 14, 2025
Malicious code in jasmine-wave-bfy074-project (npm)
- Aug 14, 2025
Malicious code in jasmine-waterfall-paz932-project (npm)
- Aug 14, 2025
Malicious code in jasmine-waterfall-iqc218-project (npm)
- Aug 14, 2025
Malicious code in jasmine-vortex-znm895-project (npm)
- Aug 14, 2025
Malicious code in jasmine-tornado-kvy749-project (npm)
- Aug 14, 2025
Malicious code in jasmine-tiger-agm120-project (npm)
- Aug 14, 2025
Malicious code in jasmine-stream-element-ui-config (npm)
- Aug 14, 2025
Malicious code in jasmine-quagmire-ivu514-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nymph-cxc922-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nni8i-sfaqw-night-project (npm)
- Aug 14, 2025
Malicious code in jasmine-nectar-dtg648-project (npm)
- Aug 14, 2025
Malicious code in jasmine-lagoon-lqr805-project (npm)
- Aug 14, 2025
Malicious code in jasmine-lagoon-dbn414-project (npm)
- Aug 14, 2025
Malicious code in jasmine-koala-qpt182-project (npm)
- Aug 14, 2025
Malicious code in jasmine-jellyfish-ovp374-project (npm)
- Aug 14, 2025
Malicious code in jasmine-jade-qff900-project (npm)
- Aug 14, 2025
Malicious code in jasmine-isk3f-3nhks-yonder-project (npm)
- Aug 14, 2025
Malicious code in jasmine-iguana-sjx682-project (npm)
- Aug 14, 2025
Malicious code in jasmine-icicle-yqx861-project (npm)
- Aug 14, 2025
Malicious code in jasmine-honeycomb-gqh758-project (npm)
- Aug 14, 2025
Malicious code in jasmine-galaxy-biosignature-envconfig (npm)
- Aug 14, 2025
Malicious code in jasmine-figures-geomorphology-karma (npm)
- Aug 14, 2025
Malicious code in jasmine-fa9xc-1l58a-zen-project (npm)
- Aug 14, 2025
Malicious code in jasmine-everest-aez381-project (npm)
- Aug 14, 2025
Malicious code in jasmine-despina-cosmology-redshift (npm)
- Aug 14, 2025
Malicious code in jasmine-configstore-nashira-zenobia (npm)
- Aug 14, 2025
Malicious code in jasmine-caravan-hpp091-project (npm)
- Aug 14, 2025
Malicious code in jasmine-butterfly-atz507-project (npm)
Page 5518 of 6,634