Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Sep 17, 2026
Malicious code in jurss-saf-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-zss-drs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-zas-dss (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-zas-dardss (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gssdsad-14s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-sdbd-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-zsaasd-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gdassa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-14s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-19s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-13as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a8s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsasasd-9sas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-a9as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-as12as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-17s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-as10as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a9as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a4s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-9sas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-12as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a8as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-as11as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gda-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsasasd-11as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a7s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gssa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsasasd-10as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a5s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsad-14s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a3s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a2s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasd-as9as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gsd-a6s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gdasa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dsaxdga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-ga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-asea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-asdf-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aseapa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dxdga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-23s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-apsa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aseaspa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-asdsea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dsxdga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-ddxsdga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dddssf-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-ddxdga-a1s (npm)
1 compromised version
Page 296 of 7,325