Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-ubi23-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat41-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-ubi40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge6-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tomat75-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul41-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul69-kuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu73-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe47-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu1-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe80-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge47-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe100-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu100-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe20-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu100-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul80-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe61-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge36-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-toge41-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu16-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tiwul14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tempe90-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu2-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telurtahu13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur51-breki (npm)
1 compromised version
Page 325 of 7,326