Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,222 total · sorted newest first- Sep 17, 2026
Malicious code in juno-proxima-wolf-tailwindcss (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-package-ursa-less-loader (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-larch-zajd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-pegasus-pegasus-meteor (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-superagent-stop-antares (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-meissa-electron-builder-janus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-saturnology-sass-loader-joviology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-style-loader-sedna-janus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-seismology-socketio-electron (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-grus-terser-mysql (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-arcturus-heka-fusion (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-yaml-neptune-node-config (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-aether-markdown-pdf-websockets (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-unuk-indus-webpack (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-hyperion-fornax-cache (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-bellatrix-version-galaxy (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-zenobia-kinetic-titan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-install-selenium-dotenv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-webpack-ceres-mensa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-charon-concurrently-hermes (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-altair-sagitta-leda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-ganymede-inquirer-ultra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jupiter-frontend-io-ceres (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-outercore-bootes-chariklo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-antares-flare-mocha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-d56jv-cxw2t-yeti-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-shack-u4r9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-areology-dorado-webdriver-mocha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-fah84-ijunr-azure-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-yurt-ntnn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-antares-gravity-prompts (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-dactyl-spectron-webdriver-magellan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-eleventy-prettier-stylelint-rimraf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-callback-pegasus-xanadu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-commitizen-singularity-xanadu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-nebula-4uxt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-qkovo-376h4-basil-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-autodiscovery-browser (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junk-test-foobar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-comet-meissa-oberon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-ptlq0-eehu6-unicorn-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-blaze-rehype-cz-conventional-changelog (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-violet-x6wa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-bh4os-1faa8-lucid-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-atlas-mongodb-publish (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-child-process-izar-betelgeuse (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-buffer-telesto-javascript (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juno-elektra-tethys-unuk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juniper-rnybe-ltjsj-xenon-project (npm)
1 compromised version
Page 299 of 7,325