Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in joni-gado-gado89-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dodol87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-enting95-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gado-gado71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dodol80-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal38-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gaplek39-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul98-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal4-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-empal25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dradag40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-dradag29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul11-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul56-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-gandul7-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bika92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bika72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bika49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-brongkos77-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubur62-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubur18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubursumsum20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-buburayam21-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-brongkos89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakso86-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-buburayam28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-brengkes6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_woodpecker_requirement (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubursumsum33-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakwan99-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-asinan44-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bika18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubur94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakwan55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-botok3-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakso91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubur14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_sole_purple-65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jongsukim (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-botok89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakwan92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakwan97-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-botok20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakso29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bika81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bubursumsum84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-botok57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-botok41-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-buburayam13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joni-bakso93-sukiwir (npm)
1 compromised version
Page 322 of 7,326