Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-sasag61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sasag83-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-semur53-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-saguer68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-saguer65-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate10-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambalado79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sasag33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sego19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ruwet73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sambel18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-sate65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangi7-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rawon100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rawon68-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto22-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rawon86-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rojak73-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang36-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rojak55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang43-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang30-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujak20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rojak47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rawon36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto52-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rendang69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto1-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangi44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rujaksoto61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ronde76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-peyek85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ragi100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pecel47-riris (npm)
1 compromised version
Page 314 of 7,326