Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-mendoan42-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mie36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak54-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes62-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mie29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mie33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendoan41-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendut47-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendut86-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak47-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendoan6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak13-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mieaceh87-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendut66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendoan65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak89-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes50-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mendoan12-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-menjes87-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lodeh89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lumpur4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-martabak46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-liwet61-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lumpur63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lengko67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lengko61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-liwet53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-liwet61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mangut6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lontong97-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mangga79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lumpur14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lodeh86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lutis84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-liwet31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lumpur13-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lutis87-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lodeh66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-liwet71-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lutis57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lupis45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-lumpur50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-mangut97-ruro (npm)
1 compromised version
Page 317 of 7,326