Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-gembus75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jus25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getuk79-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gudeg63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gudeg60-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getas19-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gulai37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getas5-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gorengan51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jengkol40-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jus55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gudeg69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-getuk73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jengkol22-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gepuk56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jengkol26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-ikan91-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-jus33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gembus15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-donat63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-donat39-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting24-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal44-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado67-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting96-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul75-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gaplek28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dodol21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dradag27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal27-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul100-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal56-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-esdoger89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting92-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal83-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-esdoger67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dradag85-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-donat11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting54-ruro (npm)
1 compromised version
Page 321 of 7,326