Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-semur76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-soto26-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serimuka25-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-soto4-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serimuka43-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serabi87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serabi95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur84-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu100-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serimuka97-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-soto27-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu37-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur84-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sroto65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serimuka17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-serabi20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-soto48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-soto20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sroto53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-tahu20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-saguer99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sego65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel80-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambalado47-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur46-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sasag73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ruwet66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sasag28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sego52-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate75-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur26-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-saguer89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sego98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel78-sluey (npm)
1 compromised version
Page 313 of 7,326