Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,241 total · sorted newest first- Sep 17, 2026
Malicious code in juliet-zeq-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliosouza (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-ygl-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-lima-rhzc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-quebec-wfzb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-z51-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-arctic-ezi750-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-november-quebec-uutrb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-romeo-whiskey-vnczk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-ugli-date-sveuh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jumpcat (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-mzv-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-yam-vpsj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-5szeh-bvx05-zenith-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jungle-7kai9-gp0zb-bramble-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliorocha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-golf-uniform-dayla (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-exf-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-7ih-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-lighthouse-il5w (npm)
1 compromised version
- Sep 17, 2026
Malicious code in julianacarvalho (npm)
1 compromised version
- Sep 17, 2026
Malicious code in julian-soluble-pot (npm)
1 compromised version
- Sep 17, 2026
Malicious code in julian-wallet-store (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-foxtrot-victor-cydzt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-date-livf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-delta-yankee-xihfn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-banana-itqc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-jalapeno-lq4a (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-apple-faqu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in julestext (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-kiwi-aiyw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_roundworm_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_viper_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-0nj-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-echo-fbqi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-echo-nectarine-irosa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-erk-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-fig-grape-isucf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-9zy-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-2oh-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-date-foxtrot-wuflb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_snake_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jukubox (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jukepi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-elderberry-quince-ycwyg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_perch_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-5vh-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juliet-ku5-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_pigeon_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in juicy_silverfish_z3n (npm)
1 compromised version
Page 302 of 7,325