Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,222 total · sorted newest first- Sep 17, 2026
Malicious code in jurss-a1rea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-javascript-corvus-dendrochronology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-rainbow-9ldu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qeuspss-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-a1rdsea-a1s (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-fazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-frfazs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-scripts-html-webpack-plugin-blitz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juqbot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-lynx-pipe-miranda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-qass-ur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-zs-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupyter-binding (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jurss-a1rea-as (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-quito-library-slidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-zs-drs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-pine-7smw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juris-fras-dgrs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-prettier-cordelia-dotenv-safe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-wasat-blitz-foundation (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juriss-zs-drs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-pyxis-barnard-perturbation (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-quark-semantic-ui-eclipse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-charlie-dzri (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-venus-figures-hugo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-venus-rate-limiter-tectonophysics (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-magellan-acamar-karma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-uglify-js-tethys-thermochronology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-wasat-npm-semantic-release (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-chromedriver-semantic-release-chai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-ariel-start-janus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-nconf-odin-xanadu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-fork-axios-magellan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-leda-pino-toml (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-sirius-react-bootstrap-weywot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-ichnology-dotenv-safe-javascript (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-asthenosphere-loop-janus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-kangaroo-39yk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-hexo-nestjs-electron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-leda-sadr-global (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-europa-test-jovian (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-sadr-geckodriver-vulcan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-bunyan-tool-charon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-middleware-wolf-webdriverio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-photon-nebula-sublimation (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-sync-middleware-ini (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-loopback-tailwindcss-blitz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-levels-bunyan-transform (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-deneb-galaxy-greatfilter (npm)
1 compromised version
Page 298 of 7,325