Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-toge16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tongseng61-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tumis44-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telurtahu32-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-toge50-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tiwul53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat41-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telurtahu72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur27-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe20-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tapai45-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-teh88-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tiwul21-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe81-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-telur46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tomat75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tempe95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-takokak14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-taiwan68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tapai27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek6-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tapai3-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek61-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-taiwan29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-takokak100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahutek66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-takokak67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-takokak97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-takokak28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur63-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serimuka39-miaww (npm)
1 compromised version
Page 312 of 7,326