Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Sep 17, 2026
Malicious code in kahanmpi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaka-poke21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kadummy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaka-poke20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaka-poke19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaisarazeshem (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaisarameen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in k8s-image-extractor (npm)
1 compromised version
- Sep 17, 2026
Malicious code in k8s-ssdeployer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaka-poke14 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-spectron-global-hercules (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-wolf-solis-query (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwtenv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jz-ui-user (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jygsaw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-sync-ora-selenium (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jzltdokrbsnxpvmi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jyotikapoor (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jyhmpldxkbvgruia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-webdriverio-pulsar-graphql (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-ursa-apollo-fornax (npm)
1 compromised version
- Sep 17, 2026
Malicious code in k0a_multer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jzonki-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwuvzy-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jyuaxotnvldismzc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-superagent-astrobiology-solarnebula (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-webpack-procyon-thuban (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-rest-jest-pm2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-tethys-eleventy-request (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-publish-hermes-miranda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jylcutigknzmdbhf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jyblog (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-polaris-accretion-transform (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-readable-registry-soap (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-pm2-sirius-dione (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-semantic-ui-nuxtjs-library (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jz-user-js-bridge (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jyotighosh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-technocracy-envconfig-venus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-test-elektra-sails (npm)
1 compromised version
- Sep 17, 2026
Malicious code in k0m3g4-test (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-toml-leda-despina (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-webdriver-mocha-regulus-umbra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jz-native-js-bridge (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-angular11-client (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-on-superagent-ora (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-markdownlint-chakra-ui-sadr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-foundation-kronos-gravity (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jwt-antares-chakra-ui-andromeda (npm)
1 compromised version
Page 293 of 7,325