Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,241 total · sorted newest first- Sep 17, 2026
Malicious code in jungle-forest-nhn122-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-waterfall-xck202-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-kiwi-sgj290-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-zenith-kth084-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior-azure-lemur (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-everest-mvi676-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_earthworm_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_crawdad_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior-aquamarine-hookworm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_albatross_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_crane_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior-magenta-elephant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior-amaranth-silkworm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle_wo2d8_qtgjw_reef (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle_tv1va_uk75e_banyan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-kite-gzo304-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_finch_peach-60 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-xenon-nux357-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_antelope_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-nectarine-ynp1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in junior_crocodile_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-mist-ldk173-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-paradise-vkl719-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-unicorn-clk121-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-r1kay-gw0aj-frost-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-november-xtzp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-tangerine-november-gkvpj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-papa-zkgw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-sierra-pxyi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-strawberry-rcij (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-rainbow-mhkp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-apple-m9oa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-quercus-s6mb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-vanilla-ujxd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-yam-xray-kopkq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-xw8-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jumeteor (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-watermelon-gemz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-papa-qhqr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jumflot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-romeo-apma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-orange-oscar-yeceo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-8hy2a-ztr5o-nymph-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-november-mike-zwjja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-strawberry-quince-ttgda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-romeo-lima-vlkto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-yam-bravo-ipljp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jumpshot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-m9z-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-wye-project (npm)
1 compromised version
Page 301 of 7,325