Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-keripik79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan23-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan78-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik47-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang93-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keraktelor14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik92-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kepok33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang39-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang64-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kepok60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kacang83-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang62-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang24-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang60-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keraktelor35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-keripik86-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang90-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan71-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kemplang93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ketan33-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-kembang20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jengkol93-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gudeg27-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gepuk38-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ikan80-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getuk73-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jus39-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gembus72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ikan3-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ikan52-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getas50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getas95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getas47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jamblang75-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gembus75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gudeg6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jamblang83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gulai22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ikan16-breki (npm)
1 compromised version
Page 320 of 7,326