Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Sep 17, 2026
Malicious code in jolly_ladybug_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-wajit55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-wajit56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joktooll-app (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_trout_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-wajit37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_alligator-gooddev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ubi77-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_pike_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ubi65-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_moth_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-wajit69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ubi97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jokonugroho (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-wajit32-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly-tan-swan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in jolly_scorpion_z3n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng48-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis39-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge76-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis49-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng8-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis19-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge83-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat31-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat69-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat74-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat31-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tongseng37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat96-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tumis12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ubi23-breki (npm)
1 compromised version
Page 324 of 7,326