Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-soto72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto9-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu57-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sroto75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto89-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto43-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto41-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sroto47-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sroto41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sroto98-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu46-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto71-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu29-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu22-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto81-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka88-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sroto98-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu68-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto68-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto37-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-soto59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka71-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu77-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-tahu16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego69-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur98-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur23-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego100-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego46-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego97-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate90-riris (npm)
1 compromised version
Page 327 of 7,326