Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,213 total · sorted newest first- Sep 17, 2026
Malicious code in jurss-cxdd-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dsf-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-22s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-dsxga-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-apsas-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aseaa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-area-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aseaspsa-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-14s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gad-14s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-21s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-2sas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-20s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aspszas-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-asdsf-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-16s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-19s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-2as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-9sas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-apszas-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gaasd-2ssas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-gasasd-15s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-aspsszas-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-tailwindcss-unuk-oberon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qass-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qeusaspss-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-schema-oberon-avior (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-sqlite-centaurus-mira (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupyterhub-admin-react (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qeupss-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-frazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-ugli-rmwp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qass-urs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-adssdsea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-socketio-sadr-cosmos (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-whiskey-274n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-react-bootstrap-sedimentology-prettier-stylelint (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qaspss-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-teak-lsdh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-fzazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-adsea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-a1rea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-javascript-corvus-dendrochronology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-rainbow-9ldu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qeuspss-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-a1rdsea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-fazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-frfazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm)
1 compromised version
Page 297 of 7,325