Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-pisang34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ragi82-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangi28-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda87-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-peyek98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ragi13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangginang57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda71-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-peyek73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak35-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pisang96-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pisang32-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-papeda71-crottsekebon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangi34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangginang65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak47-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pisang60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pisang70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-rangginang1-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-peyek84-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-pisang94-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-otak-otak15-rudi0x (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-naget94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oncom12-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur80-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oblok57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur34-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oblok4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasipecel73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oncom74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasisayur20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasipecel2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oblok22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur87-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi31-sukiwir (npm)
1 compromised version
Page 315 of 7,326