Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,270 total · sorted newest first- Sep 17, 2026
Malicious code in jq-sha3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jquery-easing-original (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jquery-ui-dialog (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jqeury (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jquery-display (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jqtools-overlay (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jquery-impromptu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jquery-impromtu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jqalendar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_jackal_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_shark_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_silkworm_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_vicuna_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_fox_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_snake_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_turtle_replicate_automation (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jphvzudbgfmiyrxt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_firefly_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_gerbil_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_anteater_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_marsupial_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_bovid_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_wren_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jparada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_dragon_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_dinosaur_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jpajxet (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_peafowl_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_cheetah_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_cricket_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_ferret_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jp_postal_codes (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_monkey_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_marlin_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jp.oripaone (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_zebra_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_chinchilla_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous-tan-silkworm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_albatross_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_bonobo_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_cuckoo_0xrequest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_lion_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joyous_cow_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-sagitta-bellatrix-luna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joy_qvtit_zz7lg_wander (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joviology-heka-accretion-speleology (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-mocha-ignite-zephyr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-sass-loader-native-cassini (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joviology-capella-aether-stratosphere (npm)
1 compromised version
Page 309 of 7,326