Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-taiwan74-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak71-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur16-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak40-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak24-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai95-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak28-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-teh55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak99-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur99-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai17-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek76-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek95-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek12-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek21-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-teh28-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak12-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-taiwan21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-teh43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-teh92-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai36-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek75-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-teh4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak33-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai93-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-takokak59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu85-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek77-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai47-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tek30-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tapai51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahutek90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-telur27-sluey (npm)
1 compromised version
Page 326 of 7,326