Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in jovian-astro-aldebaran-ignite (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-wajit54-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jooee-banut-imububr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-auth0-apex-element-ui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-asteroid-tectonophysics-bootstrap (npm)
1 compromised version
- Sep 17, 2026
Malicious code in josephphillips (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joshuathompson (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jonijoni (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jonitea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joshuabennett (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-wajit36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joqlzuvdafibyhpw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-development-meissa-configstore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joshuawright (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jooee-banut-imubuabair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-wajit62-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-csrf-javascript-gridsome (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-cypress-jest-janus (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jooee-banut-imubuabr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in josecarvalho (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jovian-grus-webdriver-manager-library (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jooee-banut-imubuabir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joshuawilliams (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joshuahoward (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-teh87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tumis47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telurtahu39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tongseng91-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tapai67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-teh10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe89-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tek4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-teh73-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ubi90-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tumis6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat50-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tiwul75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tiwul41-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-teh77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-toge5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ubi42-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tiwul89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur45-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe34-ruro (npm)
1 compromised version
Page 311 of 7,326