Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-kupang15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue35-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klanting3-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klanting49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketoprak51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue33-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kolak12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klentik18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klanting31-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klipo78-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kripik56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue30-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klanting46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klentik38-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue3-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klentik61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klipo8-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketoprak93-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kolak58-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue13-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klanting76-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klipo40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klentik46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kripik7-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klipo14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketoprak69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketoprak70-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klentik9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue1-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-klipo41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketoprak42-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kue23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang1-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kacang37-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik59-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kepok20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan94-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang14-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keraktelor24-sluey (npm)
1 compromised version
Page 319 of 7,326