Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-naget24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasiuduk82-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-naget42-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasisayur14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-moci85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasiuduk23-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-naget19-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasisayur36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi81-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-moci40-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasisayur57-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-naget23-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasisayur98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-moci65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur16-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasicampur39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ongol-ongol34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-oncom30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasi41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasiuduk49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-nasipecel8-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miemee14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miebogor8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miemee35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miemee22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-moci37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miebogor28-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam82-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam15-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-miebogor18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam90-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieayam57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendut78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes71-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mie3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh85-miaww (npm)
1 compromised version
Page 316 of 7,326