Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Sep 17, 2026
Malicious code in joko-sego10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego57-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur67-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate95-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate3-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur69-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate63-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi21-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate54-remi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur55-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur70-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur78-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi21-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serimuka40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego19-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur8-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sego54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi33-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-semur29-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-serabi36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate39-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sate55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-saguer98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sasag79-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in joko-sambel7-sukiwir (npm)
1 compromised version
Page 328 of 7,326